CVE-2025-69241 – Stored XSS in Raytha CMS

CVE ID :CVE-2025-69241

Published : March 16, 2026, 11:53 a.m. | 16 minutes ago

Description :Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page.

This issue was fixed in version 1.4.6.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…