Article
Cyber News / Article / Vulnerability in Payload CMS software
CE
CERT Polska-23 days ago
Vulnerability in Payload CMS software
CERT Polska has received a report about vulnerability in Payload CMS software and participated in coordination of its disclosure.
The vulnerabilityCVE-2026-63316: A SQL Injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by a user intoinandnot_inquery parameters allows an authenticated attacker to perform SQL Injection attacks.
This issue was fixed in version 3.90.0 and 4.0.0-canary.34.
We thank 0xMesbaha for the responsible vulnerability report.
Related articles
Ab
AbinayaPOC Released for Windows WinSock Ancillary Privilege Escalation Vulnerability
3 days ago
Me
Merav BarBroccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
11 days ago
Ra
Rami McCarthyARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
14 days ago
You might Also like
in
[email protected] (The Hacker News)-2 days ago
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
in
[email protected] (The Hacker News)-2 days ago
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Gu
Guru Baran-2 days ago
