Raytha
11 CVEs across 1 Raytha products. Browse Raytha vulnerabilities, severities, and proof-of-concept exploits.
Raytha products with known CVEs
Raytha CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-12076 | | | 2026-06-30 | Raytha CMS is vulnerable to SQL Injection within the OData filter parsing pipeline. The vulnerability allows a remote, unauthenticated attacker to execute
ar… |
CVE-2025-69246 | Critical | 9.8 | 2026-03-16 | Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering l… |
CVE-2025-69245 | Medium | 6.1 | 2026-03-16 | Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authe… |
CVE-2025-69243 | Medium | 5.3 | 2026-03-16 | Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid… |
CVE-2025-69242 | Medium | 6.1 | 2026-03-16 | Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, re… |
CVE-2025-69241 | Medium | 5.4 | 2026-03-16 | Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can inject arbitrary HTML… |
CVE-2025-69240 | High | 8.8 | 2026-03-16 | Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain. The attacker (who knows the victim's email address) … |
CVE-2025-69239 | Low | 2.7 | 2026-03-16 | Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the UR… |
CVE-2025-69238 | Medium | 4.3 | 2026-03-16 | Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated v… |
CVE-2025-69237 | Medium | 5.4 | 2026-03-16 | Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality. Authenticated attacker with permissions to create con… |
CVE-2025-69236 | Medium | 5.4 | 2026-03-16 | Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality. Authenticated attacker with permissions to edit posts… |
CVE-2025-15540 | High | 8.8 | 2026-03-16 | "Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restri… |