VendorsOpenRapidrapidcms1.3.1
Vulnerabilities

OpenRapid RapidCMS 1.3.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2023-4446
OpenRapid RapidCMS category.php sql injection
Published 2023-08-21 · Modified
9.8EPSS 0.007
CVE-2023-4448
OpenRapid RapidCMS run-movepass.php password recovery
Published 2023-08-21 · Modified
9.8EPSS 0.007
CVE-2023-4447
OpenRapid RapidCMS article-chat.php sql injection
Published 2023-08-21 · Modified
9.8EPSS 0.006
CVE-2023-5258
OpenRapid RapidCMS addgood.php sql injection
Published 2023-09-29 · Modified
9.8EPSS 0.006
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.
Published 2024-09-06 · Analyzed
9.8EPSS 0.005
CVE-2024-44839
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.
Published 2024-09-06 · Analyzed
9.8EPSS 0.005
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.
Published 2024-09-06 · Analyzed
9.8EPSS 0.005
CVE-2023-5262
OpenRapid RapidCMS uploadicon.php isImg unrestricted upload
Published 2023-09-29 · Modified
8.8EPSS 0.006
CVE-2023-5033
OpenRapid RapidCMS cate-edit-run.php sql injection
Published 2023-09-18 · Modified
7.2EPSS 0.007
CVE-2023-5032
OpenRapid RapidCMS article-edit-run.php sql injection
Published 2023-09-18 · Modified
7.2EPSS 0.006
CVE-2023-5031
OpenRapid RapidCMS article-add.php sql injection
Published 2023-09-18 · Modified
6.5EPSS 0.005
CVE-2025-64046
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
Published 2025-11-17 · Modified
6.1EPSS 0.002
CVE-2025-64047
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
Published 2025-11-24 · Modified
6.1EPSS 0.002