XSS in Xibosignage Xibo

CVE-2013-4888

Cross-site scripting (XSS) vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the layout parameter in the layout page.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.

Affected products

Xibosignage Xibo — versions 1.4.2
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, x_refsource_MISC)