# Xibo CMS digital signage platform has a cross-site scripting flaw

- Date: 2026-06-10
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2026-42558
- Products: [Xibo](https://signagelist.org/products/xibo/)

NVD published a cross-site scripting flaw in Xibo CMS. Xibo is an open source digital signage platform with a web content management system and Windows display player software.

## Sources

- [CVE-2026-42558](https://nvd.nist.gov/vuln/detail/CVE-2026-42558) (NIST NVD)
- [https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-6389-j56c-9fww](https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-6389-j56c-9fww)

Page: https://signagelist.org/incidents/2026-06-xibo-cms-digital-signage-platform-has-a/