Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: Raytha Clear all filters
TI-2026-10402 CVE-2026-12076 · GHSA-mqq6-92qv-xfm9

SQL Injection in Raytha CMS

Priority MEDIUM 49

Raytha CMS is vulnerable to SQL Injection within the OData filter parsing pipeline.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00531 Published 2026-06-30 No fix listed CWE-89
TI-2025-42699 CVE-2025-69246 · GHSA-ffgf-qg52-hgm3

Lack of bruteforce protection in Raytha CMS

Priority LOW 37

Raytha CMS does not have any brute force protection mechanism implemented.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2026-03-16 Fixed in 1.4.6 CWE-307
TI-2025-42698 CVE-2025-69245 · GHSA-wx9p-57x7-7rh9

Reflected XSS in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00288 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42697 CVE-2025-69243 · GHSA-hhx9-gc5w-h4mc

User enumeration in Raytha CMS

Priority LOW 36

Raytha CMS is vulnerable to User Enumeration in password reset functionality.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00291 Published 2026-03-16 Fixed in 1.5.0 CWE-204
TI-2025-42696 CVE-2025-69242 · GHSA-hr6p-6rx8-fj77

Reflected XSS in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00251 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42695 CVE-2025-69241 · GHSA-f3wg-948j-wp6c

Stored XSS in Raytha CMS

Priority LOW 24

Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00252 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42694 CVE-2025-69240 · GHSA-qj5q-vmr2-gmq3

Header Poisoning in Raytha CMS

Priority LOW 32

Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or `Host` headers to attacker controlled domain.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00156 Published 2026-03-16 Fixed in 1.4.6 CWE-348
TI-2025-42693 CVE-2025-69239 · GHSA-px48-xw9j-r7fx

Server-Site Request Forgery in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00258 Published 2026-03-16 Fixed in 1.4.6 CWE-918
TI-2025-42692 CVE-2025-69238 · GHSA-xmhw-fjw4-m5qf

Cross-Site Request Forgery in Raytha CMS

Priority LOW 29

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00126 Published 2026-03-16 Fixed in 1.4.6 CWE-352
TI-2025-42691 CVE-2025-69237 · GHSA-f645-7gvj-x699

Stored XSS in Raytha CMS

Priority LOW 22

Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0019 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-42690 CVE-2025-69236 · GHSA-68qq-hggp-ghfj

Stored XSS in Raytha CMS

Priority LOW 23

Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00225 Published 2026-03-16 Fixed in 1.4.6 CWE-79
TI-2025-14179 CVE-2025-15540 · GHSA-w5p6-gfqf-hh2r

Authenticated RCE in Raytha CMS

Priority MEDIUM 40

"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00496 Published 2026-03-16 Fixed in 1.4.6 CWE-94