shouldiuse.io

Categories

VERDICT

Xibo Signage Review

Depends

Should I use Xibo Signage?

Digital signage that grows with your business - xibosignage.com

· 1 month ago

Buy if you're technical or cost-driven: the open-source CMS is free, mature, and runs on many player platforms. Skip if you want plug-and-play screens or can't patch promptly — recent RCE and SQLi CVEs demand attention.

Confidence

Medium. Based on ~30 public sources; many review snippets were truncated, so user-quote coverage is thin.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Open Source (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
HostedPer-player subscription (amounts not shown in sources)

Best for

  • Self-hosters and IT teams
  • Multi-screen networks in shops, schools, offices
  • Budget-conscious large fleets
  • Organizations wanting open-source control

Not for

  • One-screen cafés wanting plug-and-play
  • Teams with nobody to run and patch a server
  • Buyers who can't tolerate CVE patching cycles
  • Non-technical marketers wanting polished SaaS simplicity

Gotchas - check before you buy

high

Patch promptly: RCE and SQLi CVEs affect installations below fixed versions

medium

Open-source route: you own hosting, updates, backups, and uptime

medium

webOS and ChromeOS players require paid commercial licenses

medium

Player license pricing changed in 2020; verify current per-screen costs before scaling

Pros and cons

Pros

  • Free open-source CMS you can self-host at zero license cost
  • Actively developed open-source project since 2006
  • Player apps for webOS and ChromeOS with setup docs
  • Vendor publishes security advisories and pushes patches
  • 14-day free trial of the hosted service

Cons

  • Self-hosting means running Docker CMS and message relay yourself
  • Recent CVEs include SQL injection and remote code execution
  • Commercial player licenses for webOS and ChromeOS add cost
  • Per-player pricing means costs scale with every screen

Sources & method

- 15 sources - Multiple CVEs since 2024, including SQL injection and RCE; vendor publishes advisories and patches.

official x5review x6security x4
  • CVE-2025-62369 — Remote Code Execution, Listed by NVD and SentinelOne as a remote code execution vulnerability in Xibo.
  • CVE-2026-31952 — SQL Injection, Tracked as an SQL injection vulnerability in Xibo.
  • GHSA-4pp3-4mw7-qfwr — Sensitive information disclosure via SQL injection, GitHub security advisory on xibo-cms.
  • CVE-2024-43412, 2024 Xibo CMS vulnerability tracked by NVD.

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 4/5. Free self-hosted CMS; hosted plans billed per player
  • Ease of use: 3/5. Docker self-hosting and CMS setup are non-trivial
  • Feature depth: 4/5. Mature CMS: scheduling, live statuses, multi-platform players
  • Support quality: 3/5. Vendor replies publicly; self-host support is community-led
  • Security posture: 2/5. Multiple 2024-2026 CVEs including SQLi and RCE
  • 4.4/5 TechJockey rating 5 reviews
  • 239 Capterra reviews listed on Capterra
  • Yes Free tier Open-source CMS + 14-day hosted trial
  • Since 2006 Project age Open-source codebase

Pricing

Open Source (self-hosted)

Free

  • Full CMS
  • You run the server

Hosted

Per-player subscription (amounts not shown in sources)

  • 14-day free trial
  • Commercial player licenses

Security

Multiple CVEs since 2024, including SQL injection and RCE; vendor publishes advisories and patches.

  • CVE-2025-62369 — Remote Code ExecutionListed by NVD and SentinelOne as a remote code execution vulnerability in Xibo.12
  • CVE-2026-31952 — SQL InjectionTracked as an SQL injection vulnerability in Xibo.13
  • GHSA-4pp3-4mw7-qfwr — Sensitive information disclosure via SQL injectionGitHub security advisory on xibo-cms.14
  • CVE-2024-434122024 Xibo CMS vulnerability tracked by NVD.

What users say

Reddit self-hosters recommend it as a budget open-source signage option; TechJockey lists 4.4/5 from 5 reviews.

“Можете попробовать xibo signage.”
Reddit, r/digitalsignage

Companies that use it

  • Elvia PCB Group
  • Blue Billboard⁵
  • Sony⁵
  • The DS Company
Full analysis

Based on ~30 public sources; many review snippets were truncated, so user-quote coverage is thin.

Free, mature open-source signage CMS — great for hands-on teams; wrong for plug-and-play buyers or patch-averse IT.

Methodology

Based on ~30 public sources; many review snippets were truncated, so user-quote coverage is thin.

Read how a report is made.

Sources

  1. Xibo official sitexibosignage.com
    official
  2. Xibo pricingxibosignage.com
    official
  3. Xibo open sourcexibosignage.com
    official
  4. GitHub xibosignage/xibogithub.com
    official
  5. Blue Billboard and Sony case studyxibosignage.com
    official
  6. Capterra reviewscapterra.co.uk
    review
  7. TechJockey reviewstechjockey.com
    review
  8. Reddit r/selfhosted threadreddit.com
    review
  9. Reddit r/digitalsignage Yodeck threadreddit.com
    review
  10. GetApp reviewgetapp.com.au
    review
  11. SoftwareAdvice reviewsoftwareadvice.co.uk
    review
  12. NVD CVE-2025-62369nvd.nist.gov
    security
  13. SentinelOne CVE-2026-31952sentinelone.com
    security
  14. GHSA-4pp3-4mw7-qfwr advisorygithub.com
    security
  15. Xibo security advisory 2024-07xibosignage.com
    security

Add this review to your site

This check for Xibo Signage says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Xibo Signage Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.