Login Request a demo
XI
Product
xibo-cms
by xibosignage · last CVE Oct 28, 2026
15
CVEs
0
On KEV
8.1
Max CVSS
5
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 5Medium 10Low 0
Severity
All severities15Critical0High5Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add xibo-cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31952
8.1
0%
Apr 24
Xibo CMS API has SQL Injection via DataSet Filter Parameter
Affected: >= 1.7, < 4.4.1
CVE-2026-42141
7.7
0%
May 12
Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality
Affected: < 4.4.1
CVE-2026-42558
7.6
0%
Jun 10
Xibo Vulnerable to Stored XSS and Iframe Sandbox Escape via Data Connector Script in DataSet
Affected: < 4.4.2
CVE-2025-62369
7.2
1%
Nov 4
Xibo CMS: Remote Code Execution through module templates
Affected: < 4.3.1
CVE-2026-52729
New
7.1–Oct 28
Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion
Affected: < 4.4.3
Showing 5