Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

xibosignage — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting xibosignage. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Xibosignage is an open-source digital signage platform used for managing and displaying content across networks. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The platform's 18 recorded CVEs highlight consistent security concerns, particularly in authentication mechanisms and input validation. While no major public security incidents have been widely documented, the accumulation of vulnerabilities over time suggests potential risks for organizations deploying the software without proper hardening. Users should implement strict access controls and regular updates to mitigate these known weaknesses.

Top products by xibosignage: xibo-cms
CVE ID Title CVSS Severity Published
CVE-2026-52730 Xibo CMS Missing Authorization in Module::settingsForm due to PHP operator precedence — xibo-cms CWE-862 4.3 Medium 2026-08-31
CVE-2026-42558 Xibo Vulnerable to Stored XSS and Iframe Sandbox Escape via Data Connector Script in DataSet — xibo-cms CWE-79 7.6 High 2026-06-10
CVE-2026-42141 Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality — xibo-cms CWE-918 7.7 High 2026-05-12
CVE-2026-31956 Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization — xibo-cms CWE-639 4.3 Medium 2026-04-24
CVE-2026-31955 Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality — xibo-cms CWE-918 4.9 Medium 2026-04-24
CVE-2026-31953 Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login — xibo-cms CWE-79 6.4 Medium 2026-04-24
CVE-2026-31952 Xibo CMS API has SQL Injection via DataSet Filter Parameter — xibo-cms CWE-89 7.6 High 2026-04-24
CVE-2025-62369 Xibo CMS: Remote Code Execution through module templates — xibo-cms CWE-94 7.2 High 2025-11-04
CVE-2024-43413 Xibo CMS XSS vulnerability using DataSet HTML columns — xibo-cms CWE-79 3.5 Low 2024-09-03
CVE-2024-43412 Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JS — xibo-cms CWE-79 4.6 Medium 2024-09-03
CVE-2024-41944 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play report — xibo-cms CWE-89 6.5 Medium 2024-07-30
CVE-2024-41804 Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula — xibo-cms CWE-89 6.5 Medium 2024-07-30
CVE-2024-41803 Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filter — xibo-cms CWE-89 4.9 Medium 2024-07-30
CVE-2024-41802 Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Import — xibo-cms CWE-89 8.1 High 2024-07-30
CVE-2024-29022 Session Hijacking via XSS attack in header and session grid in Xibo CMS — xibo-cms CWE-79 8.8 High 2024-04-12
CVE-2024-29023 Session Hijacking via token exposure on the session page in Xibo CMS — xibo-cms CWE-200 7.2 High 2024-04-12
CVE-2023-33181 Sensitive Information Disclosure abusing Stack Trace in Xibo CMS — xibo-cms CWE-209 4.3 Medium 2023-05-30
CVE-2023-33180 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display map — xibo-cms CWE-89 6.5 Medium 2023-05-30
CVE-2023-33179 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter — xibo-cms CWE-89 6.5 Medium 2023-05-30
CVE-2023-33178 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter — xibo-cms CWE-89 6.5 Medium 2023-05-30
CVE-2023-33177 Xibo CMS vulnerable to Remote Code Execution through Zip Slip — xibo-cms CWE-22 8.8 High 2023-05-30

This page lists every published CVE security advisory associated with xibosignage. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.