OpenRapid RapidCMS version 1.3.1 contains a Cross Site Scripting (XSS) vulnerability in the /system/update-run.php script. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of the affected web application. The vulnerability has a CVSS v3.1 base score of 6.1, indicating a medium severity level.