CVE-2025-69246

概要

参考情報

• cert.pl/en/posts/2026/03/CVE-2025-69236 · Third Party Advisory
• raytha.com · Product

raytha のその他の脆弱性

• CVE-2025-69245中 6.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when …
• CVE-2025-69243中 5.3Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if…
• CVE-2025-69242中 6.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter. An attacker can craft a malicious URL which, when opened by authe…
• CVE-2025-69241中 5.4Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can in…
• CVE-2025-69240高 8.8Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain. The attacker (who knows the victi…