CVE-2023-5032

Name of the Vulnerable Software and Affected Versions OpenRapid RapidCMS version 1.3.1

Description A critical issue affects some unknown functionality of the file /admin/article/article-edit-run.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely.

Recommendations For OpenRapid RapidCMS version 1.3.1, as a temporary workaround, consider restricting access to the /admin/article/article-edit-run.php file until a patch is available. Avoid using the id argument in this context to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.