CVE-2025-69238

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification.  This issue was fixed in version 1.4.6.

• CWE-352

• https://cert.pl/en/posts/2026/03/CVE-2025-69236Third Party Advisory
• https://raytha.comProduct

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-69232free5GC is an open-source project for 5th generation (5G) mo…7.5
• CVE-2025-69233Due to multiple time-of-check time-of-use race conditions in…5.3
• CVE-2025-69234Whale browser before 4.35.351.12 allows an attacker to escap…9.1
• CVE-2025-69235Whale browser before 4.35.351.12 allows an attacker to bypas…7.5
• CVE-2025-69236Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Va…5.4
• CVE-2025-69237Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Va…5.4
• CVE-2025-69239Raytha CMS is vulnerable to Server-Side Request Forgery in t…2.7
• CVE-2025-6924Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2025-69240Raytha CMS allows an attacker to spoof `X-Forwarded-Host` or…8.8
• CVE-2025-69241Raytha CMS is vulnerable to Stored XSS via FirstName and Las…5.4
• CVE-2025-69242Raytha CMS is vulnerable to reflected XSS via the backToList…6.1
• CVE-2025-69243Raytha CMS is vulnerable to User Enumeration in password res…5.3