Global
Xibo CMS April 2026 advisories include SQL injection, stored XSS, SSRF and IDOR flaws
A batch of Xibo CMS advisories published in April 2026 includes CVE-2026-31952, a SQL injection through the API DataSet filter parameter rated 7.6, and CVE-2026-31953, a stored XSS in the notification body. The batch also lists an authenticated server-side request forgery in remote DataSet functionality (CVE-2026-31955) and an IDOR in Preview and SavedReport (CVE-2026-31956). The fixed versions for these entries were not confirmed.
- Type
- Vulnerability
- Sector
- Other
- Country
- Global
