https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:29:46.921299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-34748 CVE-2026-34748 — @payloadcms/next has Stored XSS in Admin Panel 2026-10-07T03:29:46.938181+00:00

Affected: payloadcms payload

Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a stored Cross-Site Scripting (XSS) vulnerability existed in the admin panel. An authenticated user with write access to a collection could save content that, when viewed by another user, would execute in their browser. This issue has been patched in version 3.78.0.