Skip to content
Threat Feed
Subscribe

Product

@Payloadcms/Db-D1-Sqlite (< 3.90.0, >= 4.0.0-Canary.0 < 4.0.0-Canary.34)

1 brief RSS
high advisory

SQL Injection in Payload CMS SQLite and Postgres Adapters

An improper input sanitization vulnerability in Payload CMS database adapters allows attackers with collection access to execute SQL injection attacks via JSON and block fields.

@payloadcms/db-sqlite +3
1t 1c