Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: zofe rapyd-admin 9.20.0 Clear all filters
TI-2026-73455 CVE-2026-110239 · GHSA-6gv8-c7hv-6wpw

Stored cross-site scripting in Rapyd Admin rich-text component

Priority LOW 11

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-10-13 Fixed in 9.20.0 CWE-79
TI-2026-73454 CVE-2026-110238 · GHSA-98h7-qf5m-qq4g

Authorization bypass in Rapyd Admin lets customers modify user accounts

Priority MEDIUM 40

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersMo…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0046 Published 2026-10-13 Fixed in 9.20.0 CWE-639