PT-2026-25694 · Raytha+1 · Raytha

Daniel Basta · Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2025-69241

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS is susceptible to a Stored Cross-Site Scripting (XSS) issue. An authenticated attacker can inject arbitrary HTML and JavaScript code through the FirstName and LastName parameters within the profile editing functionality. This injected code will be rendered and executed when other users view the edited page.

Recommendations Update Raytha CMS to version 1.4.6 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-69241

Produtos afetados

Raytha

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-69241 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-69241 · Aviso do Fabricante
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Nota
• https://twitter.com/CVEnew/status/2033583654447026554 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2033530101518741864 · Publicação no Twitter
• https://raytha.com · Nota