Payload Cms Payload
2 CVEs affecting Payload Cms Payload. Latest disclosed: 2025-08-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4644 | | 2025-08-29 | A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new a… | |
CVE-2025-4643 | | 2025-08-29 | Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker who has stolen or intercepted token to fr… |