PayloadCMS
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 12, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpoints
Payload has a CSRF Protection Bypass in Authentication Flow
@payloadcms/next has Stored XSS in Admin Panel
Payload has an SQL Injection via Query Handling
Payload has Authenticated SSRF via Upload Functionality
Payload has Unvalidated Input in Password Recovery Endpoints
Payload has Server-Side Request Forgery (SSRF) in External File URL Uploads
Payload Affected by Cross-Collection IDOR in payload-preferences Access Control (Multi-Auth Environments)
Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters
Payload's hidden fields can be leaked on readable collections
Monitor PayloadCMS in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.