Skip to content
Threat Feed

Tag

Payloadcms

1 brief RSS
medium advisory

Payload CMS Stored XSS Vulnerability (CVE-2026-34748)

A stored Cross-Site Scripting (XSS) vulnerability exists in Payload CMS versions prior to 3.78.0, allowing authenticated users with write access to inject malicious scripts that execute in the browsers of other users.

xss cve-2026-34748 payloadcms
2r 1t 1c