Priority LOW 27
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00194 · Published 2025-11-24 · No fix listed CWE-79
Priority LOW 27
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00194 · Published 2025-11-17 · No fix listed CWE-79
Priority MEDIUM 49
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2024-09-06 · No fix listed CWE-89
Priority MEDIUM 49
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2024-09-06 · No fix listed CWE-89
Priority HIGH 76
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00503 · Published 2024-09-06 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0059 · Published 2024-08-30 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in OpenRapid RapidCMS up to 1.3.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0058 · Published 2024-08-30 · No fix listed CWE-89
Priority HIGH 71
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00784 · Published 2023-09-29 · No fix listed CWE-434
Priority HIGH 75
A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00727 · Published 2023-09-29 · No fix listed CWE-89
Priority HIGH 65
A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00669 · Published 2023-09-18 · No fix listed CWE-89
Priority HIGH 67
A vulnerability was found in OpenRapid RapidCMS 1.3.1.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00623 · Published 2023-09-18 · No fix listed CWE-89
Priority MEDIUM 62
A vulnerability was found in OpenRapid RapidCMS 1.3.1.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00516 · Published 2023-09-18 · No fix listed CWE-89
Priority HIGH 82
A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00658 · Published 2023-08-21 · No fix listed CWE-640
Priority MEDIUM 43
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00639 · Published 2023-08-21 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00736 · Published 2023-08-21 · No fix listed CWE-89
Priority MEDIUM 53
A vulnerability was found in OpenRapid RapidCMS up to 1.3.1.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.25241 · Published 2023-07-23 · No fix listed CWE-434
THREATIST.IORead the docs