CVE-2025-64046

OpenRapid RapidCMS version 1.3.1 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability exists specifically in the /system/update-run.php API endpoint, which allows for the injection of malicious scripts. To remediate this...