ExploitPublished
xibocms 3.3.4 · RCE
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until an official fix is available, consider restricting access to the affected application and monitoring for suspicious activity related to this vulnerability.
Description
xibocms 3.3.4 - RCE
Indicators of compromise
Exploit source code
# Exploit Title: XiboCMS 3.3.4- Remote Code Execution
# Google Dork: N/A
# Date: 2025-11-18
# Exploit Author: complexusprada
# Vendor Homepage: https://xibo.org.uk/
# Software Link: https://github.com/xibosignage/xibo-cms
# Version: 1.8.0 - 2.3.16, 3.0.0 - 3.3.4
# Tested on: Ubuntu Linux (Docker), Xibo CMS 3.3.4
# CVE: CVE-2023-33177
# GHSA: GHSA-jj27-x85q-crqv
# Category: webapps
"""
# Vulnerability Description:
# Xibo CMS contains a path traversal vulnerability (Zip Slip) in the layout impor…References
Community reviews
Loading reviews…