Skip to content
OpenAdvisories

Package · npm

@payloadcms/next

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-34748

    @payloadcms/next has Stored XSS in Admin Panel

    Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a stored Cross-Site Scripting (XSS) vulnerability existed in the admin panel. An authenticated user with write access to a collection could save…

    Payload CMS payload @payloadcms/next npm