Read the docs

Raytha

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Raytha records in CISA KEV

No Raytha vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Raytha 11 records MEDIUM

Records

11 records in Raytha · all components

TI-2025-14179 CVE-2025-15540 · GHSA-w5p6-gfqf-hh2r

Authenticated RCE in Raytha CMS

Priority MEDIUM 40

"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00496 Published 2026-03-16 Fixed in 1.4.6 CWE-94
TI-2025-42699 CVE-2025-69246 · GHSA-ffgf-qg52-hgm3

Lack of bruteforce protection in Raytha CMS

Priority LOW 37

Raytha CMS does not have any brute force protection mechanism implemented.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2026-03-16 Fixed in 1.4.6 CWE-307
TI-2025-42697 CVE-2025-69243 · GHSA-hhx9-gc5w-h4mc

User enumeration in Raytha CMS

Priority LOW 36

Raytha CMS is vulnerable to User Enumeration in password reset functionality.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00291 Published 2026-03-16 Fixed in 1.5.0 CWE-204
TI-2025-42694 CVE-2025-69240 · GHSA-qj5q-vmr2-gmq3

Header Poisoning in Raytha CMS

Priority LOW 32

Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00156 Published 2026-03-16 Fixed in 1.4.6 CWE-348
TI-2025-42692 CVE-2025-69238 · GHSA-xmhw-fjw4-m5qf

Cross-Site Request Forgery in Raytha CMS

Priority LOW 29

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00126 Published 2026-03-16 Fixed in 1.4.6 CWE-352
TI-2025-42695 CVE-2025-69241 · GHSA-f3wg-948j-wp6c

Stored XSS in Raytha CMS

Priority LOW 24

Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00252 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42698 CVE-2025-69245 · GHSA-wx9p-57x7-7rh9

Reflected XSS in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00288 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42696 CVE-2025-69242 · GHSA-hr6p-6rx8-fj77

Reflected XSS in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00251 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42693 CVE-2025-69239 · GHSA-px48-xw9j-r7fx

Server-Site Request Forgery in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00258 Published 2026-03-16 Fixed in 1.4.6 CWE-918
TI-2025-42690 CVE-2025-69236 · GHSA-68qq-hggp-ghfj

Stored XSS in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00225 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42691 CVE-2025-69237 · GHSA-f645-7gvj-x699

Stored XSS in Raytha CMS

Priority LOW 22

Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0019 Published 2026-03-16 Fixed in 1.4.6 CWE-79
Open these records in search →