Openrapid's vulnerability footprint centers on RapidCMS, a content-management system whose disclosures skew strongly toward critical-severity outcomes. The recurring weakness classes—SQL injection, cross-site scripting, unrestricted file uploads, and weak password-recovery mechanisms—reflect common input-handling and authentication gaps in web application platforms. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Openrapid over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4448CRITICAL A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of | Aug 21, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-4447CRITICAL A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation | Aug 21, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4446CRITICAL A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation o | Aug 21, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-3852HIGH A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/upload.php. The manipulati | Jul 23, 2023 | 7.2 | 28 | NO | NO |
CVE-2024-8331CRITICAL A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been classified as critical. This affects an unknown part of the file /admin/user/user-move-run.php. The manipul | Aug 30, 2024 | 9.8 | 27 | NO | NO |
CVE-2023-5258CRITICAL A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /resource/addgood.php. The manipulation of the argument | Sep 29, 2023 | 9.8 | 27 | NO | NO |
CVE-2024-45771CRITICAL RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php. | Sep 6, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-44839CRITICAL RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php. | Sep 6, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-44838CRITICAL RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php. | Sep 6, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-8335CRITICAL A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the | Aug 30, 2024 | 9.8 | 26 | NO | NO |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Openrapid.
Media articles that mention a CVE ID that affects a product developed by Openrapid — matched by CVE ID, not by vendor name.