# Xibo CMS has 2 cross-site scripting vulnerabilities

- Date: 2024-09-03
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2024-43412, CVE-2024-43413
- Products: [Xibo](https://signagelist.org/products/xibo/)

NVD published 2 vulnerabilities in Xibo CMS, covering cross-site scripting. Xibo is an open source digital signage platform with a web content management system (CMS).

## Sources

- [CVE-2024-43412](https://nvd.nist.gov/vuln/detail/CVE-2024-43412) (NIST NVD)
- [CVE-2024-43413](https://nvd.nist.gov/vuln/detail/CVE-2024-43413) (NIST NVD)
- [https://github.com/xibosignage/xibo-cms/commit/d8f13339469d9f19ce591fb2bd7c9e0e0d2da118](https://github.com/xibosignage/xibo-cms/commit/d8f13339469d9f19ce591fb2bd7c9e0e0d2da118)
- [https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-336f-wrgx-57gg](https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-336f-wrgx-57gg)

Page: https://signagelist.org/incidents/2024-09-xibo-cms-has-2-cross-site-scripting/