shouldiuse.io

VERDICT

Should I use Xibo Signage?

Digital signage that grows with your business - xibosignage.com

Depends. Buy if you're technical or cost-driven: the open-source CMS is free, mature, and runs on many player platforms. Skip if you want plug-and-play screens or can't patch promptly — recent RCE and SQLi CVEs demand attention.

Confidence

Medium. Based on ~30 public sources; many review snippets were truncated, so user-quote coverage is thin.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Open Source (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
HostedPer-player subscription (amounts not shown in sources)

Best for

  • Self-hosters and IT teams
  • Multi-screen networks in shops, schools, offices
  • Budget-conscious large fleets
  • Organizations wanting open-source control

Not for

  • One-screen cafés wanting plug-and-play
  • Teams with nobody to run and patch a server
  • Buyers who can't tolerate CVE patching cycles
  • Non-technical marketers wanting polished SaaS simplicity

Gotchas - check before you buy

high

Patch promptly: RCE and SQLi CVEs affect installations below fixed versions

medium

Open-source route: you own hosting, updates, backups, and uptime

medium

webOS and ChromeOS players require paid commercial licenses

medium

Player license pricing changed in 2020; verify current per-screen costs before scaling

Pros and cons

Pros

  • Free open-source CMS you can self-host at zero license cost
  • Actively developed open-source project since 2006
  • Player apps for webOS and ChromeOS with setup docs
  • Vendor publishes security advisories and pushes patches
  • 14-day free trial of the hosted service

Cons

  • Self-hosting means running Docker CMS and message relay yourself
  • Recent CVEs include SQL injection and remote code execution
  • Commercial player licenses for webOS and ChromeOS add cost
  • Per-player pricing means costs scale with every screen

Sources & method

Analyzed 9/27/2026 - 15 sources - Multiple CVEs since 2024, including SQL injection and RCE; vendor publishes advisories and patches.

official x5review x6security x4
  • CVE-2025-62369 — Remote Code Execution, Listed by NVD and SentinelOne as a remote code execution vulnerability in Xibo.
  • CVE-2026-31952 — SQL Injection, Tracked as an SQL injection vulnerability in Xibo.
  • GHSA-4pp3-4mw7-qfwr — Sensitive information disclosure via SQL injection, GitHub security advisory on xibo-cms.
  • CVE-2024-43412, 2024 Xibo CMS vulnerability tracked by NVD.

Key stats

  • Value for money: 4/5

    Rating

  • Free

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 4/5. Free self-hosted CMS; hosted plans billed per player
  • Ease of use: 3/5. Docker self-hosting and CMS setup are non-trivial
  • Feature depth: 4/5. Mature CMS: scheduling, live statuses, multi-platform players
  • Support quality: 3/5. Vendor replies publicly; self-host support is community-led
  • Security posture: 2/5. Multiple 2024-2026 CVEs including SQLi and RCE
  • 4.4/5 TechJockey rating 5 reviews
  • 239 Capterra reviews listed on Capterra
  • Yes Free tier Open-source CMS + 14-day hosted trial
  • Since 2006 Project age Open-source codebase

Pricing

Open Source (self-hosted)

Free

  • Full CMS
  • You run the server

Hosted

Per-player subscription (amounts not shown in sources)

  • 14-day free trial
  • Commercial player licenses

Security

Multiple CVEs since 2024, including SQL injection and RCE; vendor publishes advisories and patches.

  • CVE-2025-62369 — Remote Code ExecutionListed by NVD and SentinelOne as a remote code execution vulnerability in Xibo.12
  • CVE-2026-31952 — SQL InjectionTracked as an SQL injection vulnerability in Xibo.13
  • GHSA-4pp3-4mw7-qfwr — Sensitive information disclosure via SQL injectionGitHub security advisory on xibo-cms.14
  • CVE-2024-434122024 Xibo CMS vulnerability tracked by NVD.

What users say

Reddit self-hosters recommend it as a budget open-source signage option; TechJockey lists 4.4/5 from 5 reviews.

“Можете попробовать xibo signage.”
Reddit, r/digitalsignage

Companies that use it

  • Elvia PCB Group
  • Blue Billboard⁵
  • Sony⁵
  • The DS Company
Full analysis

Based on ~30 public sources; many review snippets were truncated, so user-quote coverage is thin.

Free, mature open-source signage CMS — great for hands-on teams; wrong for plug-and-play buyers or patch-averse IT.

Methodology

Based on ~30 public sources; many review snippets were truncated, so user-quote coverage is thin.

Sources

  1. Xibo official sitexibosignage.com
    official
  2. Xibo pricingxibosignage.com
    official
  3. Xibo open sourcexibosignage.com
    official
  4. GitHub xibosignage/xibogithub.com
    official
  5. Blue Billboard and Sony case studyxibosignage.com
    official
  6. Capterra reviewscapterra.co.uk
    review
  7. TechJockey reviewstechjockey.com
    review
  8. Reddit r/selfhosted threadreddit.com
    review
  9. Reddit r/digitalsignage Yodeck threadreddit.com
    review
  10. GetApp reviewgetapp.com.au
    review
  11. SoftwareAdvice reviewsoftwareadvice.co.uk
    review
  12. NVD CVE-2025-62369nvd.nist.gov
    security
  13. SentinelOne CVE-2026-31952sentinelone.com
    security
  14. GHSA-4pp3-4mw7-qfwr advisorygithub.com
    security
  15. Xibo security advisory 2024-07xibosignage.com
    security

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.