CVE-2025-69243CWE-204
User enumeration in Raytha CMS
Medium · published March 16, 2026
What it is
Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins.
This issue was fixed in version 1.5.0.
The record
Technical detail
- CVSS v4.0
- 6.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00285 · 19.9th percentile
- Weakness
- CWE-204 · Observable Response Discrepancy
- Published
- 2026-03-16T11:54Z
EPSS history
Timeline