CVE-2025-69245 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authen…
Medium CVSS: 5.1

CVE-2025-69245

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser.

This issue was fixed in 1.4.6.
Vendor
Raytha
Product
Raytha
CWE
CWE-79
Yayın Tarihi
2026-03-16 14:18:01
Güncelleme
2026-03-16 19:22:28
Source Identifier
cvd@cert.pl
KEV Date Added
-

Kategoriler

CWE-79 Raytha MEDIUM Raytha 2026

Referanslar

https://cert.pl/en/posts/2026/03/CVE-2025-69236 https://raytha.com