payloadcms

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

payloadcms records in CISA KEV

No payloadcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Payload 35 records MEDIUM

Records

44 records

TI-2026-10166 CVE-2026-11779 · GHSA-jg8r-5jh2-v2xj

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access

MEDIUM 57

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00364 Published 2026-06-26 No fix listed CWE-307

TI-2026-20653 CVE-2026-25544 · GHSA-xx6w-jxg9-2wh8

Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters

MEDIUM 50

Payload is a free and open source headless content management system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00825 Published 2026-02-06 Fixed in 3.73.0 CWE-89

TI-2026-68608 CVE-2026-105859 · GHSA-f7hx-52q9-hcrf

Payload CMS lets attackers update collection documents

MEDIUM 49

Payload is a free and open source headless content management system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00347 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-639

TI-2026-68606 CVE-2026-105857 · GHSA-r488-j9vj-wx3q

Remote code execution in Payload Form Builder plugin

MEDIUM 49

Payload is a free and open source headless content management system.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00429 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-1321

TI-2026-68480 CVE-2026-105845 · GHSA-v49j-62m6-pgrr

SQL injection in Payload SQLite and Postgres adapters

MEDIUM 49

Payload is a free and open source headless content management system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2026-10-06 Fixed in 3.88.0, 4.0.0-canary.27 CWE-89

TI-2026-68479 CVE-2026-105844 · GHSA-qf28-8hc6-vwrp

Prototype pollution in Payload Import Export plugin

MEDIUM 49

Payload is a free and open source headless content management system.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0071 Published 2026-10-06 Fixed in 3.88.0, 4.0.0-canary.27 CWE-1321

TI-2026-68612 CVE-2026-105863 · GHSA-66wr-7vmr-p5jq

Payload authentication token field handling issue

MEDIUM 48

Payload is a free and open source headless content management system.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00549 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-290

TI-2026-26995 CVE-2026-34751 · GHSA-hp5w-3hxx-vmwf

Payload has Unvalidated Input in Password Recovery Endpoints

MEDIUM 47

Payload is a free and open source headless content management system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00311 Published 2026-04-01 Fixed in 3.79.1 CWE-472

TI-2026-68489 CVE-2026-105851

Field access control bypass in Payload duplicate operation

MEDIUM 46

Payload is a free and open source headless content management system.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00249 Published 2026-10-06 No fix listed CWE-284

TI-2022-10819 CVE-2022-27952 · GHSA-w8xh-93qh-35vw

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0…

MEDIUM 46

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0231 Published 2022-04-12 Fixed in 0.15.1 CWE-434

TI-2026-68617 CVE-2026-105868 · GHSA-9qpg-3cf8-w33x

Uploaded XML files can run JavaScript in Payload CMS

MEDIUM 44

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00165 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-434

TI-2026-68603 CVE-2026-105854 · GHSA-2g7p-5934-q4w7

Regex slowdown in Payload CMS multipart Content-Type validation

MEDIUM 44

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00354 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-1333

TI-2026-68488 CVE-2026-105850 · GHSA-8r29-2mp2-pmrw

Repeated Stripe order confirmation processing in Payload Ecommerce

MEDIUM 44

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00308 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-837

TI-2026-68611 CVE-2026-105862 · GHSA-2pwp-2369-8fg3

Sanitization bypass lets uploaded SVG files run JavaScript in Payload

LOW 39

Payload is a free and open source headless content management system.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00271 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-434

TI-2026-26992 CVE-2026-34748 · GHSA-mmxc-95ch-2j7c

@payloadcms/next has Stored XSS in Admin Panel

LOW 39

Payload is a free and open source headless content management system.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00291 Published 2026-04-01 Fixed in 3.78.0 CWE-79

TI-2026-68607 CVE-2026-105858 · GHSA-97rh-rhh2-7vjv

Remote code execution in Payload through first-register

LOW 38

Payload is a free and open source headless content management system.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00475 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-1321

TI-2026-68615 CVE-2026-105866 · GHSA-v5gf-vpjc-pc7w

Payload CMS account lockout lets attackers block user sign-in

LOW 37

Payload is a free and open source headless content management system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00369 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-307

TI-2026-68614 CVE-2026-105865 · GHSA-p223-2wr2-j562

Path traversal in Payload CMS upload cleanup deletes unintended files

LOW 37

Payload is a free and open source headless content management system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00379 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-22

TI-2026-68605 CVE-2026-105856 · GHSA-pj7x-6wpf-pgvp

SQL injection in Payload CMS SQLite and Postgres adapters

LOW 37

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00294 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 +1 CWE-89

TI-2026-68491 CVE-2026-105853 · GHSA-xgv3-crq2-6f69

Payload token and password reset responses expose restricted fields

LOW 37

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00257 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-200

TI-2026-68478 CVE-2026-105806 · GHSA-2q76-m6w6-qgc6

Payload MCP plugin lets users manage API keys outside their account

LOW 37

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00252 Published 2026-10-06 Fixed in 3.88.0 CWE-862

TI-2026-26991 CVE-2026-34747 · GHSA-7xxh-373w-35vg

Payload has an SQL Injection via Query Handling

LOW 37

Payload is a free and open source headless content management system.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00322 Published 2026-04-01 Fixed in 3.79.1 CWE-89

TI-2026-68490 CVE-2026-105852 · GHSA-7c34-32v3-j575

Authorization bypass in Payload relationship queries exposes related documents

LOW 36

Payload is a free and open source headless content management system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00268 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-862

TI-2026-68476 CVE-2026-105805 · GHSA-9g87-32v6-3c2r

Sort queries in Payload CMS could expose protected field information

LOW 36

Payload is a free and open source headless content management system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00276 Published 2026-10-06 Fixed in 3.88.0, 4.0.0-canary.27 CWE-200

TI-2026-68604 CVE-2026-105855 · GHSA-fx49-4h83-wjv9

Payload: Field-level password update restrictions were not enforced

LOW 35

Payload is a free and open source headless content management system.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00248 Published 2026-10-06 Fixed in 3.90.0, 4.0.0-canary.34 CWE-284

Open these records in search →

Critical	9
High	20
Medium	15
Low	0
No CVSS	0