CVE-2025-69236

概要

参考情報

• cert.pl/en/posts/2026/03/CVE-2025-69236 · Third Party Advisory
• raytha.com · Product

raytha のその他の脆弱性

• CVE-2025-69246緊急 9.8Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests w…
• CVE-2025-69245中 6.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when …
• CVE-2025-69243中 5.3Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if…
• CVE-2025-69242中 6.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter. An attacker can craft a malicious URL which, when opened by authe…
• CVE-2025-69241中 5.4Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can in…