PT-2026-25689 · Raytha+1 · Raytha

Daniel Basta · Published 2026-03-16 · Updated 2026-03-16 · CVE-2025-69236

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS is susceptible to a Stored Cross-Site Scripting (XSS) issue. An authenticated attacker with post editing privileges can inject arbitrary HTML and JavaScript code via the FieldValues[1].Value parameter within the post editing functionality. This injected code will be rendered and executed when other users visit the modified page. The affected parameter is used in the post editing functionality.

Recommendations Update Raytha CMS to version 1.4.6 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-69236

Affected Products

Raytha

References · 9

• https://osv.dev/vulnerability/CVE-2025-69236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69236 · Security Note
• https://raytha.com · Note
• https://twitter.com/CVEnew/status/2033583659132072063 · Twitter Post
• https://t.me/cveNotify/155552 · Telegram Post
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Note
• https://t.me/cveNotify/155554 · Telegram Post
• https://t.me/cveNotify/155553 · Telegram Post
• https://t.me/cveNotify/155555 · Telegram Post