Lucene search
+L

2 matches found

Snyk
Snyk
added 2026/04/01 9:24 p.m.13 views

Cross-site Scripting (XSS)

Overview @payloadcms/plugin-mcp is a MCP Model Context Protocol capabilities with Payload Affected versions of this package are vulnerable to Cross-site Scripting XSS in the admin panel when user-supplied content is saved in a collection with versions enabled. An attacker can execute arbitrary...

8.7CVSS6AI score0.00286EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/01 9:24 p.m.5 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the admin panel when user-supplied content is saved in a collection with versions enabled. An attacker can execute arbitrary scripts in the context of another user's browser by submitting crafted input and...

8.7CVSS6AI score0.00286EPSS
SaveExploits0References2
Rows per page
Query Builder