ExploitPublished
Xibo CMS 4.3.0 · RCE via SSTI
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 5 May 2026, 07:48 UTC
What to do
AI-suggested
Until a patch is available, consider restricting access to the CMS interface and monitoring for suspicious activity related to template processing. Avoid exposing the CMS to untrusted networks.
Description
Xibo CMS 4.3.0 - RCE via SSTI
Indicators of compromise
Exploit source code
# Exploit Title: Xibo CMS - Authenticated Remote Code Execution via SSTI
# Date: 2025-11-04
# Exploit Author: Cristian Branet
# Vendor Homepage: https://xibosignage.com/
# Software Link: https://github.com/xibosignage/xibo-cms/
# Version: < 4.3.1
# Tested on: Linux (Ubuntu 22.04)
# CVE : CVE-2025-62639
# Article: https://cristibtz.github.io/posts/CVE-2025-62369/
import requests, argparse, pyfiglet, re, json, time
parser = argparse.ArgumentParser(description="This script exploits CVE-2025-62369…References
Community reviews
Loading reviews…