XSS in Raytha

CVE-2025-69236

Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality. Authenticated attacker with permissions to edit posts can inject arbitrary HTML and JS into website, which will be rendered/executed w…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (9.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References