Skip to content
OpenAdvisories

Vendor

Xibo Signage

28 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-41089 Public exploit

    Reflected Cross-Site Scripting (XSS) in CMS

    Reflected Cross-Site Scripting (XSS) in Xibo CMS v4.1.2 from Xibo Signage, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add an element that has the 'Config…

  • Medium 5.1
    CVE-2025-41088 Public exploit

    Stored Cross-Site Scripting (XSS) in CMS

    Stored Cross-Site Scripting (XSS) in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add a text element in the 'Global Element…