CVE-2025-69238CWE-352

Cross-Site Request Forgery in Raytha CMS

Medium · published March 16, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification.

This issue was fixed in version 1.4.6.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00123 · 1.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-03-16T11:53Z
EPSS history
Timeline
  • 16 MAR 11:53Z
    Cross-Site Request Forgery in Raytha CMS
    cvelistv5