CVE-2025-64046: Openrapid Rapidcms

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /system/update-run.php.

Affected products

• Openrapid Rapidcms: version 1.3.1 only

Published 2025-11-17. Last modified 2026-07-05.