https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-31956.htmlhttps://patchthecve.com/cve/CVE-2026-31956.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 4.3: Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4.4.1, any authenticated user can manually construct a URL to preview campaigns/regions, and export saved reports belonging to other users. Exploitation of the vhttps://patchthecve.com/cve/CVE-2026-31955.htmlhttps://patchthecve.com/cve/CVE-2026-31955.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 4.9: Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery (SSRF) vulnerability in versions prior to 4.4.1 allows users with DataSet permissions to make arbitrary HTTP requests from the CMS sehttps://patchthecve.com/cve/CVE-2026-31953.htmlhttps://patchthecve.com/cve/CVE-2026-31953.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.4: Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Site Scripting (XSS) vulnerability in versions prior to 4.4.1 allows an authenticated user with notification creation permissions to inject arbitrary JavaScript inhttps://patchthecve.com/cve/CVE-2026-31952.htmlhttps://patchthecve.com/cve/CVE-2026-31952.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.6: Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 have an SQL injection vulnerability in the API routes inside the CMS responsible for Filtering DataSets. This allows an authenticated user to to obtain