The vulnerability in OpenRapid RapidCMS v1.3.1 involves an authentication bypass via SQL injection targeting the 'name' cookie parameter in the /template/default/menu.php component. This allows an attacker to circumvent authentication mechanisms by injecting a crafted SQL payload. The vulnerability is publicly disclosed but lacks a CVSS score and official remediation details. No affected versions beyond v1.3.1 are specified, and no vendor advisory or patch information is available.

Successful exploitation of this vulnerability could allow an attacker to bypass authentication controls, potentially gaining unauthorized access to the application. The absence of a patch or mitigation increases the risk until a fix is available. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected component and monitoring for unusual activity related to cookie manipulation. Avoid relying solely on this component for authentication enforcement.