PT-2026-25695 · Raytha+1 · Raytha

Daniel Basta · Published 2026-03-16 · Updated 2026-03-16 · CVE-2025-69242

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS is susceptible to a reflected cross-site scripting (XSS) issue through the backToListUrl parameter. An attacker can create a malicious URL. When an authenticated user accesses this URL, it can lead to the execution of arbitrary JavaScript code within the user's browser. The vulnerable parameter is backToListUrl.

Recommendations Update to version 1.4.6 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-69242

Affected Products

Raytha

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-69242 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69242 · Vendor Advisory
• https://raytha.com · Note
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Note
• https://twitter.com/CVEnew/status/2033583653545250964 · Twitter Post