OpenRapid

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

OpenRapid records in CISA KEV

No OpenRapid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rapidcms 16 records HIGH

Records

16 records in Rapidcms · all components

TI-2023-04106 CVE-2023-4448 · GHSA-2r4q-h9qr-qqjp

OpenRapid RapidCMS run-movepass.php password recovery

HIGH 82

A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00658 Published 2023-08-21 No fix listed CWE-640

TI-2024-30012 CVE-2024-44838 · GHSA-qx8c-7fq5-7j7x

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username…

HIGH 76

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00503 Published 2024-09-06 No fix listed CWE-89

TI-2023-04834 CVE-2023-5258 · GHSA-23xx-r9hm-q9g9

OpenRapid RapidCMS addgood.php sql injection

HIGH 75

A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00727 Published 2023-09-29 No fix listed CWE-89

TI-2023-04838 CVE-2023-5262 · GHSA-c567-fgv9-j7jc

OpenRapid RapidCMS uploadicon.php isImg unrestricted upload

HIGH 71

A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00784 Published 2023-09-29 No fix listed CWE-434

TI-2023-04634 CVE-2023-5032 · GHSA-m6p7-53hf-54fr

OpenRapid RapidCMS article-edit-run.php sql injection

HIGH 67

A vulnerability was found in OpenRapid RapidCMS 1.3.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00623 Published 2023-09-18 No fix listed CWE-89

TI-2023-04635 CVE-2023-5033 · GHSA-48gj-fq9q-g4j7

OpenRapid RapidCMS cate-edit-run.php sql injection

HIGH 65

A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00669 Published 2023-09-18 No fix listed CWE-89

TI-2023-04633 CVE-2023-5031 · GHSA-73r3-hgqv-fp7p

OpenRapid RapidCMS article-add.php sql injection

MEDIUM 62

A vulnerability was found in OpenRapid RapidCMS 1.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00516 Published 2023-09-18 No fix listed CWE-89

TI-2024-07728 CVE-2024-8335 · GHSA-36fq-3276-7898

OpenRapid RapidCMS runlogon.php sql injection

MEDIUM 57

A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0059 Published 2024-08-30 No fix listed CWE-89

TI-2024-07725 CVE-2024-8331 · GHSA-2rf7-m94r-75qx

OpenRapid RapidCMS user-move-run.php sql injection

MEDIUM 57

A vulnerability was found in OpenRapid RapidCMS up to 1.3.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0058 Published 2024-08-30 No fix listed CWE-89

TI-2023-03600 CVE-2023-3852 · GHSA-xvqv-w3m7-g397

OpenRapid RapidCMS upload.php unrestricted upload

MEDIUM 53

A vulnerability was found in OpenRapid RapidCMS up to 1.3.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.25241 Published 2023-07-23 No fix listed CWE-434

TI-2024-30738 CVE-2024-45771 · GHSA-6c48-fh55-hjmq

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password…

MEDIUM 49

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2024-09-06 No fix listed CWE-89

TI-2024-30013 CVE-2024-44839 · GHSA-35xg-724r-fcfx

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid…

MEDIUM 49

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2024-09-06 No fix listed CWE-89

TI-2023-04105 CVE-2023-4447 · GHSA-hfgr-934p-crcv

OpenRapid RapidCMS article-chat.php sql injection

MEDIUM 43

A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-08-21 No fix listed CWE-89

TI-2023-04104 CVE-2023-4446 · GHSA-v33j-4992-w6h8

OpenRapid RapidCMS category.php sql injection

MEDIUM 43

A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00736 Published 2023-08-21 No fix listed CWE-89

TI-2025-39514 CVE-2025-64047 · GHSA-3cmx-q8hq-64c3

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.

LOW 27

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-11-24 No fix listed CWE-79

TI-2025-39513 CVE-2025-64046 · GHSA-7qr9-67vj-5px4

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.

LOW 27

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00194 Published 2025-11-17 No fix listed CWE-79

Open these records in search →

Critical	7
High	4
Medium	5
Low	0
No CVSS	0