Priority LOW 20
Xibo is an open source digital signage platform with a web content management system and Windows display player software.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00265 · Published 2026-04-24 · Fixed in 4.4.1 CWE-639
Priority LOW 22
Xibo is an open source digital signage platform with a web content management system and Windows display player software.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00282 · Published 2026-04-24 · Fixed in 4.4.1 CWE-918
Priority LOW 27
Xibo is an open source digital signage platform with a web content management system and Windows display player software.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00141 · Published 2026-04-24 · Fixed in 4.4.1 CWE-79
Priority LOW 35
Xibo is an open source digital signage platform with a web content management system and Windows display player software.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00246 · Published 2026-04-24 · Fixed in 4.4.1 CWE-184
Priority LOW 36
Xibo is an open source digital signage platform with a web content management system (CMS).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00961 · Published 2025-11-04 · Fixed in 4.3.1 CWE-1336
Priority LOW 22
Xibo is an open source digital signage platform with a web content management system (CMS).
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00279 · Published 2024-09-03 · Fixed in 4.1.0 CWE-79
Priority LOW 24
Xibo is an open source digital signage platform with a web content management system (CMS).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00279 · Published 2024-09-03 · Fixed in 4.1.0 CWE-79
Priority LOW 31
Xibo is a content management system (CMS).
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00435 · Published 2024-07-30 · No fix listed CWE-89
Priority LOW 38
Xibo is a content management system (CMS).
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00457 · Published 2024-07-30 · No fix listed CWE-89
Priority LOW 25
Xibo is a content management system (CMS).
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00444 · Published 2024-07-30 · No fix listed CWE-89
Priority LOW 25
Xibo is a content management system (CMS).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00538 · Published 2023-05-30 · Fixed in 3.3.5 CWE-209
Priority LOW 30
Xibo is a content management system (CMS).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00621 · Published 2023-05-30 · Fixed in 3.3.5 CWE-89
Priority LOW 30
Xibo is a content management system (CMS).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00621 · Published 2023-05-30 · Fixed in 3.3.5 CWE-89
Priority LOW 30
Xibo is a content management system (CMS).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00626 · Published 2023-05-30 · Fixed in 2.3.17, 3.3.5 CWE-89
Priority MEDIUM 50
Xibo is a content management system (CMS).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.07036 · Published 2023-05-30 · Fixed in 2.3.17, 3.3.5 CWE-22
Priority LOW 32
Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Digital Signage Xibo 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new administrator vi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00848 · Published 2014-01-29 · No fix listed CWE-352
Priority LOW 23
Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the layout page.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01374 · Published 2014-01-29 · No fix listed CWE-79
Priority LOW 35
SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0121 · Published 2014-01-29 · No fix listed CWE-89
Priority MEDIUM 40
Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and 1.4.x before 1.4.2 allows remote attackers to read arbitrary files via a ..
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.18125 · Published 2013-10-02 · No fix listed CWE-22
THREATIST.IORead the docs