https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:53:54.529579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-6445 EUVD-2026-6445 2026-10-10T14:53:54.531907+00:00 EUVD-2026-6445 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41804 fkie_cve-2024-41804 2026-10-10T14:53:54.531946+00:00

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet Column Formulas. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the `formula` parameter. Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue.