PT-2026-25694 · Raytha+1 · Raytha

Daniel Basta · CVE-2025-69241 · Published 2026-03-16 · Updated 2026-03-16

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS is susceptible to a Stored Cross-Site Scripting (XSS) issue. An authenticated attacker can inject arbitrary HTML and JavaScript code through the FirstName and LastName parameters within the profile editing functionality. This injected code will be rendered and executed when other users view the edited page.

Recommendations Update Raytha CMS to version 1.4.6 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-69241

Affected Products

Raytha

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69241.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-69241 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69241 · Vendor Advisory
• https://github.com/raythahq/raytha · Note
• https://twitter.com/CVEnew/status/2033583654447026554 · Twitter Post
• https://raytha.com · Note
• https://twitter.com/cyberbivash/status/2033530101518741864 · Twitter Post
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Note