What is CVE-2025-69238?

CVE-2025-69238 is a medium-severity vulnerability in Raytha, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2026-03-16.

How severe is CVE-2025-69238?

Medium severity. CVSS v3 base score is 4.3 out of 10.

CSRF in Raytha

CVE-2025-69238

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification. This issue was fixed in version 1.4.6.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.001 (2.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Raytha — versions 0

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cvd@cert.pl (Third Party Advisory, third-party-advisory)
cvd@cert.pl (Product, product)

Frequently asked questions

What is CVE-2025-69238?: CVE-2025-69238 is a medium-severity vulnerability in Raytha, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2026-03-16.
How severe is CVE-2025-69238?: Medium severity. CVSS v3 base score is 4.3 out of 10.