5 matches found
CVE-2025-64047
The OpenRapid RapidCMS version 1.3.1 is vulnerable to a Cross Site Scripting (XSS) flaw located in the /user/user-move.php file. This vulnerability originates from the improper neutralization of input during web page generation, potentially allowing an attacker to execute malicious scripts in a u...
6.1CVSS5.7AI score0.00181EPSS
SaveExploits0References1Affected Software1
CVE-2024-44838
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...
9.8CVSS0.00503EPSS
SaveExploits1References1
CVE-2024-44839
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...
9.8CVSS8.2AI score
SaveExploits0References3
20