CVE-2013-4888
NONE
Published Jan 29, 201412y ago · Modified Jun 16, 20262w ago
Published Jan 29, 2014 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the layout page.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| xibosignage | xibo | 1.4.2 | any |
References 1
- infosec42.blogspot.com http://infosec42.blogspot.com/2013/08/exploit-xibo-digital-signage-sql.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.