Payload vulnerabilities
We track 1 vulnerability in Payload products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Payload vulnerabilities
- 8.7 High severity
Payload CMS: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90