xibosignage xibo-cms authorization issue vulnerability

Versions prior to 4.4.3 of xibosignage xibo-cms contain an authorization issue vulnerability. This vulnerability stems from a lack of access control checks on PUT/DELETE /action/id, allowing authenticated users to modify or delete any Layout...

CVE-2025-46738

An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code...