CVE-2025-69242

Reflected XSS in Raytha CMS

Summary

Original description

The description as published by the source.

Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScript execution in the victim’s browser.

This issue was fixed in version 1.4.6.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory cert.pl
advisory github.com
advisory nvd.nist.gov
package github.com
web raytha.com

Metadata

CVE: CVE-2025-69242
Published: 2026-03-16
First seen on SecPulse: 7 months ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-79

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago