Vulnerabilities
Report: Essential Guide: CVE-2026-31953 - Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login
CVE ID :CVE-2026-31953 Published : April 24, 2026, 1:16 a.m. | 31 minutes ago Description :Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Site Scripting (XSS) vulnerability in versions prior to 4.4.1 allows an authenticated user with notification creation permissions to inject arbitrary JavaScript into the notification body. When the notification is set as an