PT-2026-111412 · Pyload · Payloadcms

0Xmesbaha

·

CVE-2026-63316

·

Publicado

2026-10-13

·

Atualizado

2026-10-13

CVSS v4.0

8.7

Alta

VetorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not in" query paramethers allows an authenticated attacker to perform SQL Injection attacks.
This issue was fixed in version 3.90.0 and 4.0.0-canary.34.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-63316

Produtos afetados

Payloadcms