CVE-2025-64047

OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripting (XSS) in /user/user-move.php.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2025-11-24

Last modified

2026-07-05

Weaknesses

CWE-79

Affected products

• Rapidcms (Openrapid)

References

• https://gist.github.com/b1uel0n3/b105ad05dbcd3fe148a26e8180dddda7