Approved changes feed: RSS · Atom

cpe:2.3:a:openrapid:rapidcms:1.3.1:*:*:*:*:*:*:*

part: a version: 1.3.1 update: *

VendorOpenrapid (09224c86-c5bd-5a4f-9852-43cfca91bae1)
ProductRapidcms (35866aa6-921f-5419-8b02-a9c0032c314b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openrapid/rapidcms purl2cpe 2026-06-01 10:12:20.828022

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64047 vulnerable 2026-06-08 07:39:17.938821 Details available
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
Published: 2025-11-24T00:00:00.000Z
Updated: 2026-07-05T01:20:51.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64046 vulnerable 2026-06-08 07:39:17.938253 Details available
OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
Published: 2025-11-17T00:00:00.000Z
Updated: 2026-07-05T01:20:47.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8331 vulnerable 2026-06-08 07:00:24.264226 OpenRapid RapidCMS user-move-run.php sql injection
MEDIUM (6.3)
A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-30T11:00:08.995Z
Updated: 2024-08-30T14:47:40.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45771 vulnerable 2026-06-08 06:48:09.015031 Details available
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.
Published: 2024-09-06T00:00:00.000Z
Updated: 2024-09-09T14:47:15.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44839 vulnerable 2026-06-08 06:45:54.210506 Details available
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.
Published: 2024-09-06T00:00:00.000Z
Updated: 2024-09-09T14:48:33.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44838 vulnerable 2026-06-08 06:45:54.209995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5262 vulnerable 2026-06-08 06:19:43.058420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5258 vulnerable 2026-06-08 06:19:43.046362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5033 vulnerable 2026-06-08 06:19:40.735440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5032 vulnerable 2026-06-08 06:19:40.734762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5031 vulnerable 2026-06-08 06:19:40.734072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4448 vulnerable 2026-06-08 06:16:12.386919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4447 vulnerable 2026-06-08 06:16:12.386444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4446 vulnerable 2026-06-08 06:16:12.385995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.