Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:14 p.m.4 views

CVE-2025-69239

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.4 views

EUVD-2025-208705

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.4CVSS5.8AI score0.00036EPSS
Exploits0References3
OSV
OSV
added 2026/03/16 2:18 p.m.2 views

CVE-2025-69239

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

2.7CVSS5.9AI score0.00032EPSS
Exploits0References2
NVD
NVD
added 2026/03/16 2:18 p.m.1 views

CVE-2025-69239

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS0.00036EPSS
Exploits0References2
CVE
CVE
added 2026/03/16 11:53 a.m.7 views

CVE-2025-69239

Raytha CMS (affected component: Themes - Import from URL) is vulnerable to Server-Side Request Forgery. The vulnerability arises from allowing a high-privilege user to supply a URL for a server-side HTTP request, enabling potential unintended requests. The issue is fixed in version 1.4.6. The CVS...

5.1CVSS5.8AI score0.00036EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/16 11:53 a.m.24 views

CVE-2025-69239 Server-Site Request Forgery in Raytha CMS

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS0.00036EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/16 11:53 a.m.4 views

CVE-2025-69239 Server-Site Request Forgery in Raytha CMS

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00036EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/16 11:53 a.m.6 views

CVE-2025-69239

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00036EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

Raytha CMS 代码问题漏洞

Raytha CMS is a content management system developed by the American company Raytha. Versions of Raytha CMS prior to 1.4.6 contained code vulnerabilities. These vulnerabilities stemmed from the “Themes – Import from URL” feature, which had a server-side request forgeing vulnerability. This...

5.4CVSS5.9AI score0.00036EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.3 views

PT-2026-25692

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6...

5.1CVSS5.8AI score0.00036EPSS
Exploits0References2
Veracode
Veracode
added 2025/08/18 7:24 a.m.4 views

Deserialization

prestashop/prestashop is vulnerable to Deserialization. The vulnerability is due to improper handling of crafted POST requests in the /themes/import component, which allows an attacker to execute arbitrary code...

6.5CVSS7.3AI score0.00994EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.1 views

PrestaShop 安全漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop version v8.2.0, which stems from a PHAR deserialization issue in...

6.5CVSS6.8AI score0.00994EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.1 views

PT-2025-21968 · Unknown · Xylus Themes Import Social Events

Name of the Vulnerable Software and Affected Versions: Xylus Themes Import Social Events versions 1.8.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

6.5CVSS6.3AI score0.00129EPSS
Exploits0References5
Rows per page
Query Builder