PatchTheCVErapidcms vulnerabilities and fixes
Recent CVEs affecting rapidcms, with upgrade or downgrade steps. 7 tracked.
rapidcms has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-11-24. Highest priority: CVE-2024-45771 (score 55/100).
- CVE-2025-64047 MEDIUM 6.1 DOWNGRADE OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
- CVE-2025-64046 MEDIUM 6.1 DOWNGRADE OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.
- CVE-2024-8335 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1
- CVE-2024-8331 MEDIUM 6.3 UPGRADE A vulnerability was found in OpenRapid RapidCMS up to 1.3.1
- CVE-2024-45771 CRITICAL 9.8 DOWNGRADE RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resourc
- CVE-2024-44839 CRITICAL 9.8 DOWNGRADE RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /defaul
- CVE-2024-44838 CRITICAL 9.8 DOWNGRADE RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resourc
FAQ
How do I fix rapidcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rapidcms being exploited right now?
None of the tracked rapidcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rapidcms CVE should I patch first?
CVE-2024-45771 currently ranks highest (55/100): RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resourc.