CVE-2025-64047: Openrapid Rapidcms

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.

Affected products

• Openrapid Rapidcms: version 1.3.1 only

Published 2025-11-24. Last modified 2026-07-05.