https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:33:41.465249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-41804 CVE-2024-41804 — Xibo allows Sensitive Information Disclosure abusing SQL Injection in Xibo CMS DataSet Column Formula 2026-10-10T16:33:41.466466+00:00

Affected: xibosignage xibo-cms, xibosignage xibo

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet Column Formulas. This allows an authenticated user to to obtain and modify arbitrary data from the Xibo database by injecting specially crafted values in to the `formula` parameter. Users should upgrade to version 3.3.12 or 4.0.14 which fix this issue.