CVE-2025-64046

Description

References

• gist.github.com/b1uel0n3/c8467f156f523fcf16dc572a34693126 · Third Party Advisory

More vulnerabilities in rapidcms

• CVE-2025-64047MEDIUM 6.1OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.
• CVE-2024-45771CRITICAL 9.8RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php.
• CVE-2024-44839CRITICAL 9.8RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php.
• CVE-2024-44838CRITICAL 9.8RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php.
• CVE-2024-8335CRITICAL 9.8A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resour…