11 matches found
SQL Injection
Overview @payloadcms/db-postgres is a The officially supported Postgres database adapter for Payload Affected versions of this package are vulnerable to SQL Injection via improper escaping of string values in parseParams when constructing JSON queries for in and notin operators. An authenticated...
8.7CVSS6AI score0.00259EPSS
SaveExploits0References2
20