CVE-2026-38930

OpenRapid RapidCMS v1.3.1 contains an authentication bypass vulnerability in the /template/default/menu.php component. The flaw is caused by the improper neutralization of special elements used in an SQL command, which allows an attacker to bypass authentication by injecting a crafted SQL payload...