PatchTheCVE: openrapidhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-64047: OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.https://patchthecve.com/cve/CVE-2025-64047.htmlhttps://patchthecve.com/cve/CVE-2025-64047.htmlSun, 05 Jul 2026 02:17:23 +0000MEDIUM 6.1: OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.CVE-2025-64046: OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.https://patchthecve.com/cve/CVE-2025-64046.htmlhttps://patchthecve.com/cve/CVE-2025-64046.htmlSun, 05 Jul 2026 02:17:22 +0000MEDIUM 6.1: OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.CVE-2024-45771: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resourchttps://patchthecve.com/cve/CVE-2024-45771.htmlhttps://patchthecve.com/cve/CVE-2024-45771.htmlWed, 17 Jun 2026 07:54:47 +0000CRITICAL 9.8: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.CVE-2024-44839: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /defaulhttps://patchthecve.com/cve/CVE-2024-44839.htmlhttps://patchthecve.com/cve/CVE-2024-44839.htmlWed, 17 Jun 2026 07:53:09 +0000CRITICAL 9.8: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.CVE-2024-44838: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resourchttps://patchthecve.com/cve/CVE-2024-44838.htmlhttps://patchthecve.com/cve/CVE-2024-44838.htmlWed, 17 Jun 2026 07:53:09 +0000CRITICAL 9.8: RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.CVE-2024-8335: A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1https://patchthecve.com/cve/CVE-2024-8335.htmlhttps://patchthecve.com/cve/CVE-2024-8335.htmlWed, 17 Jun 2026 08:22:22 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed CVE-2024-8331: A vulnerability was found in OpenRapid RapidCMS up to 1.3.1https://patchthecve.com/cve/CVE-2024-8331.htmlhttps://patchthecve.com/cve/CVE-2024-8331.htmlWed, 17 Jun 2026 08:22:22 +0000MEDIUM 6.3: A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has b