Payload CMS vulnerabilities

1 known vulnerability in Payload CMS from Payload. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Payload CMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-63316Oct 13, 2026Payload

  A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90