Skip to content

Vendor

Payload vulnerabilities

2 published CVES affecting Payload, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Payload alerts

Products

Latest Payload CVEs

Newest publication first

  1. CVE-2026-63316 SQL Injection in Payload CMS

    Published
    HighCVSS 8.7 EPSS 0.26%

    A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary....

  2. CVE-2024-1240 Open Redirection in pyload/pyload

    Published
    MediumCVSS 6.1 EPSS 0.34%

    An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.