Xibo vulnerabilities
6 known vulnerabilities in Xibo from Xibosignage. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
xibo-cms: Improper Neutralization of Special Elements used in an SQL Command
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 have an SQL injection vulnerability in the API routes inside the CMS responsible for Filtering DataSets. This a
- 7.2 High severity
xibo-cms: Improper Control of Generation of Code
Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "S
- 8.1 High severity
xibo-cms: Improper Neutralization of Special Elements used in an SQL Command
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by inj
- 7.2 High severity
xibo-cms: Exposure of Sensitive Information to an Unauthorized Actor
Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. Session tokens are exposed in the return of session search API call on the sessions page. Subsequently they can be exfiltrated and used to
- 8.8 High severity
xibo-cms: Improper Neutralization of Input During Web Page Generation
Xibo is an Open Source Digital Signage platform with a web content management system and Windows display player software. In affected versions some request headers are not correctly sanitised when stored in the session and display tables. These headers can be
- 8.8 High severity
xibo-cms: Improper Limitation of a Pathname to a Restricted Directory
Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside