Skip to content
OpenAdvisories

Vendor

Xibo Signage

28 known vulnerabilities.

Products

xibo-cms 28
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2026-42141 Public exploit

    Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality

    Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.1, an authenticated Server-Side Request Forgery (SSRF) vulnerability in the Xibo CMS allows users with Library upload permis…

    Xibo Signage xibo-cms
  • High 7.2
    CVE-2025-62369 Public exploit

    Xibo CMS: Remote Code Execution through module templates

    Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "…

    Xibo Signage xibo-cms
  • High 8.8
    CVE-2023-33177 Public exploit

    Xibo CMS vulnerable to Remote Code Execution through Zip Slip

    Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outsid…

    Xibo Signage xibo-cms