CVE-2025-69242

概要

参考情報

• cert.pl/en/posts/2026/03/CVE-2025-69236 · Third Party Advisory
• raytha.com · Product

raytha のその他の脆弱性

• CVE-2025-69246緊急 9.8Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests w…
• CVE-2025-69245中 6.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when …
• CVE-2025-69243中 5.3Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if…
• CVE-2025-69241中 5.4Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can in…
• CVE-2025-69240高 8.8Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain. The attacker (who knows the victi…