Sploitus

18 exploited vulnerabilities in Xibo

Vulnerabilities with publicly known exploits

Vendors
Xibo
With known exploits
18
Affected Xibosignage Xibo versions
< 2.3.17, 3.3.5, 4.4.1, 3.3.12, 4.0.14, 4.3.1, 4.1.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2024-29022
CVSS 8.8 HIGH 2024-04-12FIX AVAILABLE
CVE-2023-33177 3 exploits
CVSS 8.8 HIGH 2023-05-30FIX AVAILABLE
📄 XiboCMS 3.3.4 Traversal / Code ExecutionExploit for Path Traversal in Xibosignage Xibo
CVE-2026-31952
CVSS 8.1 HIGH 2026-04-24FIX AVAILABLE
CVE-2024-41802
CVSS 8.1 HIGH 2024-07-30FIX AVAILABLE
CVE-2025-62369 2 exploits
CVSS 7.2 HIGH 2025-11-04FIX AVAILABLE
📄 Xibo CMS SSTI / Remote Code ExecutionXibo CMS 4.3.0 - RCE via SSTI
CVE-2024-29023
CVSS 7.2 HIGH 2024-04-12FIX AVAILABLE
CVE-2024-41944
CVSS 6.5 MEDIUM 2024-07-30FIX AVAILABLE
CVE-2024-41804
CVSS 6.5 MEDIUM 2024-07-30FIX AVAILABLE
CVE-2023-33180
CVSS 6.5 MEDIUM 2023-05-30FIX AVAILABLE
CVE-2023-33179
CVSS 6.5 MEDIUM 2023-05-30FIX AVAILABLE
CVE-2023-33178
CVSS 6.5 MEDIUM 2023-05-30FIX AVAILABLE
CVE-2026-31953
CVSS 6.4 MEDIUM 2026-04-24FIX AVAILABLE
CVE-2024-43412
CVSS 5.4 MEDIUM 2024-09-03FIX AVAILABLE
CVE-2026-31955
CVSS 4.9 MEDIUM 2026-04-24FIX AVAILABLE
CVE-2024-41803
CVSS 4.9 MEDIUM 2024-07-30FIX AVAILABLE
CVE-2024-43413
CVSS 4.8 MEDIUM 2024-09-03FIX AVAILABLE
CVE-2026-31956
CVSS 4.3 MEDIUM 2026-04-24FIX AVAILABLE
CVE-2023-33181
CVSS 4.3 MEDIUM 2023-05-30FIX AVAILABLE