Stored XSS in Raytha CMS Affects User Profile Editing Functionality

CVE-2025-69241

What is CVE-2025-69241?

Raytha CMS is exposed to a Stored XSS vulnerability that arises through user input parameters, specifically the FirstName and LastName fields in the profile editing section. An authenticated attacker can exploit this flaw by injecting malicious HTML and JavaScript code, which will execute whenever users visit the compromised profile page. This vulnerability compromises the security of the application, allowing attackers to execute arbitrary scripts in the context of the affected users' browsers. The flaw was addressed in version 1.4.6, highlighting the importance of keeping software updated to mitigate such risks.

References