CVE-2024-44838: Openrapid Rapidcms

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.

Affected products

• Openrapid Rapidcms: version 1.3.1 only

Published 2024-09-06. Last modified 2026-06-17.