PT-2025-47151 · Openrapid · Rapidcms

CVE-2025-64046 · Publicado 2025-11-17 · Atualizado 2025-11-17

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenRapid RapidCMS version 1.3.1

Description OpenRapid RapidCMS version 1.3.1 is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the /system/update-run.php API endpoint. This allows for the injection of malicious scripts.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /system/update-run.php endpoint.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-64046

Produtos afetados

Rapidcms

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64046.json · Exploit
• https://t.me/CVEtracker/37503 · Publicação no Telegram
• http://rapidcms.com · Nota
• https://twitter.com/CVEnew/status/1990445850657493419 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-64046 · Nota de Segurança
• https://gist.github.com/b1uel0n3/c8467f156f523fcf16dc572a34693126 · Nota
• https://osv.dev/vulnerability/CVE-2025-64046 · Aviso do Fabricante