Skip to content
OpenAdvisories

Package · npm

@payloadcms/plugin-form-builder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2026-105857

    Payload: RCE in Payload Form Builder

    Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This…

    payloadcms payload @payloadcms/plugin-form-builder npm