PT-2026-25697 · Raytha+1 · Raytha

Daniel Basta + 1 · Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2025-69245

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS is susceptible to a Reflected Cross-Site Scripting (XSS) issue. This occurs through manipulation of the returnUrl parameter within the logon functionality. An attacker can create a malicious URL. When an authenticated user accesses this URL, it can lead to the execution of arbitrary JavaScript code in the user's web browser.

Recommendations Update Raytha CMS to version 1.4.6 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-69245

Produtos afetados

Raytha

Referências · 6

• https://twitter.com/CVEnew/status/2033583651716534352 · Publicação no Twitter
• https://raytha.com · Nota
• https://osv.dev/vulnerability/CVE-2025-69245 · Aviso do Fabricante
• https://twitter.com/cyberbivash/status/2033530096116457769 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-69245 · Nota de Segurança
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Nota