11 matches found
EUVD-2026-93500
Payload: SQL injection in SQLite/Postgres...
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview @payloadcms/db-mongodb is a The officially supported MongoDB database adapter for Payload Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the beforeValidate hook's array and blocks field processing, wh...
CVE-2026-105856
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...
CVE-2026-105856
The Payload headless content management system is vulnerable to SQL injection in versions prior to 3.90.0, 4.0.0-canary.34, and 3.73.0 (for Postgres). An attacker with read and create or update access to a collection containing a json field or a blocks field (with blocksAsJSON enabled) can execut...
CVE-2026-105856 Payload: SQL injection in SQLite/Postgres
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...
CVE-2026-105856 Payload: SQL injection in SQLite/Postgres
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...
CVE-2026-105856: Improper Neutralization of Special Elements used in an SQL Command
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operator...
CVE-2021-41258
Kirby is an open source file structured CMS. In affected versions Kirby's blocks field stores structured data for each block. This data is then used in block snippets to convert the blocks to HTML for use in your templates. We recommend to escape HTML special characters to protect against...
CVE-2021-41258: Improper Neutralization of Input During Web Page Generation
Kirby is an open source file structured CMS. In affected versions Kirby's blocks field stores structured data for each block. This data is then used in block snippets to convert the blocks to HTML for use in your templates. We recommend to escape HTML special characters to protect against...
PT-2021-23219
Name of the Vulnerable Software and Affected Versions Kirby versions prior to 3.5.8 Description The issue concerns Kirby's blocks field, which stores structured data for each block, and this data is used in block snippets to convert blocks to HTML for use in templates. The default snippet for the...