VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 16, 2026· Updated Mar 16, 2026

Stored XSS in Raytha CMS

CVE-2025-69241

Description

Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page.

This issue was fixed in version 1.4.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Raytha/Raythallm-fuzzy2 versions
    <1.4.6+ 1 more
    • (no CPE)range: <1.4.6
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.