VendorsOpenRapidrapidcmsall versions
Vulnerabilities

OpenRapid RapidCMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2023-4446
OpenRapid RapidCMS category.php sql injection
Published 2023-08-21 · Modified
9.8EPSS 0.007
CVE-2023-4448
OpenRapid RapidCMS run-movepass.php password recovery
Published 2023-08-21 · Modified
9.8EPSS 0.007
CVE-2023-4447
OpenRapid RapidCMS article-chat.php sql injection
Published 2023-08-21 · Modified
9.8EPSS 0.006
CVE-2023-5258
OpenRapid RapidCMS addgood.php sql injection
Published 2023-09-29 · Modified
9.8EPSS 0.006
CVE-2024-8335
OpenRapid RapidCMS runlogon.php sql injection
Published 2024-08-30 · Analyzed
9.8EPSS 0.006
CVE-2024-8331
OpenRapid RapidCMS user-move-run.php sql injection
Published 2024-08-30 · Analyzed
9.8EPSS 0.006
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.
Published 2024-09-06 · Analyzed
9.8EPSS 0.005
CVE-2024-44839
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.
Published 2024-09-06 · Analyzed
9.8EPSS 0.005
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.
Published 2024-09-06 · Analyzed
9.8EPSS 0.005
CVE-2023-5262
OpenRapid RapidCMS uploadicon.php isImg unrestricted upload
Published 2023-09-29 · Modified
8.8EPSS 0.006
CVE-2023-3852
OpenRapid RapidCMS upload.php unrestricted upload
Published 2023-07-23 · Analyzed
7.2EPSS 0.252
CVE-2023-5033
OpenRapid RapidCMS cate-edit-run.php sql injection
Published 2023-09-18 · Modified
7.2EPSS 0.007
CVE-2023-5032
OpenRapid RapidCMS article-edit-run.php sql injection
Published 2023-09-18 · Modified
7.2EPSS 0.006
CVE-2023-5031
OpenRapid RapidCMS article-add.php sql injection
Published 2023-09-18 · Modified
6.5EPSS 0.005
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
Published 2025-11-17 · Modified
6.1EPSS 0.002
CVE-2025-64047
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
Published 2025-11-24 · Modified
6.1EPSS 0.002