CVE-2025-69239 — Server-Site Request Forgery in Raytha CMS

CVE-2025-69239

Server-Site Request Forgery in Raytha CMS PUBLISHED

Description (CNA)

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6.

Affected (CNA)

Vendor / product	Versions
Raytha / Raytha	affected 0 before 1.4.6

CWE

CWE-918

References

https://cert.pl/en/posts/2026/03/CVE-2025-69236
https://raytha.com

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.