Skip to content
Threat Feed
Subscribe

Vendor

Payload CMS

2 briefs RSS
high advisory

Duplicate Order Processing in Payload Ecommerce Stripe Adapter

A logic flaw in the @payloadcms/plugin-ecommerce Stripe payment adapter allows order confirmations to be processed multiple times, posing a risk of duplicate fulfillment.

payloadcms/plugin-ecommerce
1c
high threat

Blind SQL Injection Vulnerability in Payload CMS

Payload CMS versions prior to 3.73.0 are vulnerable to Blind SQL Injection via maliciously crafted JSON filter inputs processed by the Drizzle database adapter.

exploited Payload CMS webapps sqli vulnerability
1r 1t 1c