Global
Xibo CMS flaws can lead to session hijacking (CVE-2024-29022, CVE-2024-29023)
Xibo's April 2024 advisory covered two CMS flaws, CVE-2024-29022 and CVE-2024-29023. The first is a cross-site scripting bug rated 8.8 that can lead to session hijacking, and the second is a token exposure issue rated 7.2. Xibo told users to upgrade to 3.3.10 or 4.0.9, or to the latest release.
- Type
- Vulnerability
- Sector
- Other
- Country
- Global
