CVE-2026-31952 | xibosignage xibo-cms up to 4.4.0 API Filter sql injection (GHSA-rq92-f6fv-3629)

April 24, 2026 Yanac

A vulnerability has been found in xibosignage xibo-cms up to 4.4.0 and classified as critical. Impacted is an unknown function of the component API Filter. The manipulation leads to sql injection.

This vulnerability is listed as CVE-2026-31952. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More