CVE-2025-69245

CVE-2025-69245 : Raytha CMS is affected by a reflected XSS via the returnUrl parameter in the logon flow. An attacker can craft a URL that, when opened by an authenticated user, may execute arbitrary JavaScript in the user’s browser. The issue has a fixed version: 1.4.6. The CVSS base score is 5....

CVE-2025-69245: Improper Neutralization of Input During Web Page Generation

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...