Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-69245 Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticate… https://www.cve.org/CVERecord?id=CVE-2025-69245
Post summary
The text discloses a reflected XSS vulnerability in Raytha CMS via the login returnUrl parameter, with no mention of patches, exploits, or active use.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-69245 - Reflected XSS in Raytha CMS Intel Report: https://ift.tt/lFJOeR0
Post summary
An alert announces CVE-2025-69245 as a reflected XSS in Raytha CMS, linking to an intel report but providing no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | raytha | raytha | - | - | - |