agentprime: xibosignage-xibo-cmsEvery new CVE for xibosignage-xibo-cms.https://agentprime.io/CVE-2026-50542: Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosurehttps://agentprime.io/advisories/CVE-2026-50542/https://agentprime.io/advisories/CVE-2026-50542/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 15:34:27 GMTCVECVE-2026-50543: Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Deviceshttps://agentprime.io/advisories/CVE-2026-50543/https://agentprime.io/advisories/CVE-2026-50543/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 15:32:51 GMTCVECVE-2026-50539: Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachmentshttps://agentprime.io/advisories/CVE-2026-50539/https://agentprime.io/advisories/CVE-2026-50539/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 15:31:12 GMTCVECVE-2026-50541: Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Exporthttps://agentprime.io/advisories/CVE-2026-50541/https://agentprime.io/advisories/CVE-2026-50541/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 13:25:10 GMTCVECVE-2026-52729: Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletionhttps://agentprime.io/advisories/CVE-2026-52729/https://agentprime.io/advisories/CVE-2026-52729/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 13:23:13 GMTCVECVE-2026-52730: Xibo CMS Missing Authorization in Module::settingsForm due to PHP operator precedencehttps://agentprime.io/advisories/CVE-2026-52730/https://agentprime.io/advisories/CVE-2026-52730/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 19:16:46 GMTCVECVE-2026-42558: Xibo Vulnerable to Stored XSS and Iframe Sandbox Escape via Data Connector Script in DataSethttps://agentprime.io/advisories/CVE-2026-42558/https://agentprime.io/advisories/CVE-2026-42558/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 21:39:09 GMTCVECVE-2026-42141: Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionalityhttps://agentprime.io/advisories/CVE-2026-42141/https://agentprime.io/advisories/CVE-2026-42141/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 17:14:12 GMTCVECVE-2026-31956: Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorizationhttps://agentprime.io/advisories/CVE-2026-31956/https://agentprime.io/advisories/CVE-2026-31956/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 00:16:03 GMTCVECVE-2026-31955: Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionalityhttps://agentprime.io/advisories/CVE-2026-31955/https://agentprime.io/advisories/CVE-2026-31955/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 00:14:15 GMTCVECVE-2026-31953: Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Loginhttps://agentprime.io/advisories/CVE-2026-31953/https://agentprime.io/advisories/CVE-2026-31953/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 00:08:21 GMTCVECVE-2026-31952: Xibo CMS API has SQL Injection via DataSet Filter Parameterhttps://agentprime.io/advisories/CVE-2026-31952/https://agentprime.io/advisories/CVE-2026-31952/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 00:05:04 GMTCVECVE-2025-62369: Xibo CMS: Remote Code Execution through module templateshttps://agentprime.io/advisories/CVE-2025-62369/https://agentprime.io/advisories/CVE-2025-62369/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 21:18:38 GMTCVECVE-2024-43413: Xibo CMS XSS vulnerability using DataSet HTML columnshttps://agentprime.io/advisories/CVE-2024-43413/https://agentprime.io/advisories/CVE-2024-43413/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Sep 2024 18:52:27 GMTCVECVE-2024-43412: Xibo CMS XSS vulnerability when previewing files uploaded to the library containing HTML/JShttps://agentprime.io/advisories/CVE-2024-43412/https://agentprime.io/advisories/CVE-2024-43412/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Sep 2024 16:52:23 GMTCVECVE-2024-41944: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS proof of play reporthttps://agentprime.io/advisories/CVE-2024-41944/https://agentprime.io/advisories/CVE-2024-41944/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jul 2024 16:24:40 GMTCVECVE-2024-41804: Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formulahttps://agentprime.io/advisories/CVE-2024-41804/https://agentprime.io/advisories/CVE-2024-41804/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jul 2024 15:51:53 GMTCVECVE-2024-41802: Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Data Importhttps://agentprime.io/advisories/CVE-2024-41802/https://agentprime.io/advisories/CVE-2024-41802/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jul 2024 15:49:52 GMTCVECVE-2024-41803: Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Filterhttps://agentprime.io/advisories/CVE-2024-41803/https://agentprime.io/advisories/CVE-2024-41803/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jul 2024 15:49:51 GMTCVECVE-2024-29022: Session Hijacking via XSS attack in header and session grid in Xibo CMShttps://agentprime.io/advisories/CVE-2024-29022/https://agentprime.io/advisories/CVE-2024-29022/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Apr 2024 21:04:23 GMTCVECVE-2024-29023: Session Hijacking via token exposure on the session page in Xibo CMShttps://agentprime.io/advisories/CVE-2024-29023/https://agentprime.io/advisories/CVE-2024-29023/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Apr 2024 21:00:55 GMTCVECVE-2023-33181: Sensitive Information Disclosure abusing Stack Trace in Xibo CMShttps://agentprime.io/advisories/CVE-2023-33181/https://agentprime.io/advisories/CVE-2023-33181/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 20:57:38 GMTCVECVE-2023-33180: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display maphttps://agentprime.io/advisories/CVE-2023-33180/https://agentprime.io/advisories/CVE-2023-33180/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 20:18:40 GMTCVECVE-2023-33179: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilterhttps://agentprime.io/advisories/CVE-2023-33179/https://agentprime.io/advisories/CVE-2023-33179/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 20:07:13 GMTCVECVE-2023-33178: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filterhttps://agentprime.io/advisories/CVE-2023-33178/https://agentprime.io/advisories/CVE-2023-33178/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 19:55:49 GMTCVECVE-2023-33177: Xibo CMS vulnerable to Remote Code Execution through Zip Sliphttps://agentprime.io/advisories/CVE-2023-33177/https://agentprime.io/advisories/CVE-2023-33177/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 May 2023 19:12:01 GMTCVE