Skip to content
OpenAdvisories

Vendor

zofe

5 known vulnerabilities.

Products

rapyd-admin 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-110239

    Rapyd Admin before 9.20.0 Stored XSS via rich-text Component

    Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client…

    zofe rapyd-admin
  • Medium 6.1
    CVE-2026-109565

    Rapyd Admin 9.4.0 before 9.20.0 Stored XSS via select-list Component

    Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through self-registered display names. Attackers can register with an HTML or JavaScript name rendered unescaped …

    zofe rapyd-admin