CVE-2026-38930
MEDIUM NVDCVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
May 27, 2026
Description
OpenRapid RapidCMS v1.3.1 was discovered to contain an authentication bypass in the /template/default/menu.php component. This vulnerability is exploited via injecting a crafted SQL payload into the name cookie parameter.