CVE-2026-105868— Payload: Uploaded XML files could execute same-origin JavaScript
Quick assessment
Affected
payloadcms payload
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Payload 是一款免费且开源的无头内容管理系统。在 3.90.0 之前的版本以及 4.0.0-canary.34 之前的 canary 版本中，如果本地上传配置允许上传 XML 文件，则攻击者可以上传一个包含 JavaScript 执行代码的 XML 文件及其样式表。当已登录用户打开该文件时，会在 Payload 源环境中执行 JavaScript 代码。该问题已在 3.90.0 版本和 4.0.0-canary.34 版本中修复。
Possible ATT&CK Techniques 2 AI
T1189 · Drive-by Compromise T1059 · Command and Scripting InterpreterAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| payloadcms | payload | < 3.90.0 |
affected |
>= 4.0.0-canary.0, < 4.0.0-canary.34 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105868
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Payload: Uploaded XML files could execute same-origin JavaScript
Source: CVE Program / CVE List V5
Vulnerability Description
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user opens the file. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| payloadcms | payload | < 3.90.0 | - |
|
II. Public POCs for CVE-2026-105868
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105868
请登录查看更多情报信息。
Other References for CVE-2026-105868 (3)
-
https://github.com/payloadcms/payload/releases/tag/v3.90.0 x_refsource_MISC
-
https://github.com/payloadcms/payload/security/advisories/GHSA-9qpg-3cf8-w33x x_refsource_CONFIRM
Same Patch Batch · payloadcms · 2026-10-06 · 29 CVEs total
| CVE-2026-105857 | 10.0 CRITICAL | Payload: RCE in Payload Form Builder |
| CVE-2026-105845 | 9.8 CRITICAL | Payload: SQL Injection in SQLite and Postgres |
| CVE-2026-105859 | 9.8 CRITICAL | Payload: Unauthorized update to collection documents |
| CVE-2026-105844 | 9.3 CRITICAL | Payload: Prototype pollution in Payload Import Export plugin |
| CVE-2026-105851 | 9.3 CRITICAL | Payload: Field access control bypass on auth collections |
| CVE-2026-105863 | 9.2 CRITICAL | Payload authentication token field handling issue |
| CVE-2026-105850 | 8.8 HIGH | Payload: Order confirmation validation issue in Payload Ecommerce |
| CVE-2026-105862 | 8.7 HIGH | Payload: Bypassed sanitization of user uploaded SVGs |
| CVE-2026-105854 | 8.7 HIGH | Payload: ReDoS in Multipart Content-Type Validation |
| CVE-2026-105806 | 8.6 HIGH | Payload: Improper access control for MCP API keys |
| CVE-2026-105856 | 8.6 HIGH | Payload: SQL injection in SQLite/Postgres |
| CVE-2026-105865 | 8.1 HIGH | Payload: Incomplete validation during the upload file lifecycle |
| CVE-2026-105858 | 8.1 HIGH | Payload: Remote Code Execution through first-register |
| CVE-2026-105849 | 7.7 HIGH | Payload: API key disclosure through ordinary document reads |
| CVE-2026-105855 | 7.6 HIGH | Payload: Field-level password update restrictions were not enforced |
| CVE-2026-105861 | 7.2 HIGH | Payload external upload trust validation issue |
| CVE-2026-106100 | 7.1 HIGH | Payload: Field-level write access bypass in Payload on MongoDB |
| CVE-2026-105867 | 7.1 HIGH | Payload: Client uploads could overwrite S3 objects |
| CVE-2026-105860 | 7.1 HIGH | Payload: Tenant authorization bypass in Multi-Tenant Plugin |
| CVE-2026-105847 | 7.1 HIGH | Payload: Polymorphic join queries could disclose hidden fields |
Showing top 20 of 29 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: payload
-
CVE-2026-106100
Payload: Field-level write access bypass in Payload on Mongo -
CVE-2026-105867
Payload: Client uploads could overwrite S3 objects -
CVE-2026-105866
Payload: Unauthenticated account-lockout denial of service -
CVE-2026-105865
Payload: Incomplete validation during the upload file lifecy -
CVE-2026-105864
Payload: Cross-tenant create in @payloadcms/plugin-multi-ten
Same vendor: payloadcms
-
CVE-2026-106100
Payload: Field-level write access bypass in Payload on Mongo -
CVE-2026-105867
Payload: Client uploads could overwrite S3 objects -
CVE-2026-105866
Payload: Unauthenticated account-lockout denial of service -
CVE-2026-105865
Payload: Incomplete validation during the upload file lifecy -
CVE-2026-105864
Payload: Cross-tenant create in @payloadcms/plugin-multi-ten
Same weakness: CWE-434
-
CVE-2026-104069
HortusFox < 6.2 Remote Code Execution via Theme Import -
CVE-2026-39770
WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vu -
CVE-2026-39759
WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upl -
CVE-2026-39757
WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vuln -
CVE-2026-39755
WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upl
V. Comments for CVE-2026-105868
No comments yet