ZeroDay Findings
Sign inSign up

Findings

CVE-2025-69240

Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.

Published Mar 16, 2026 · updated Jun 17, 2026 · raytha raytha

Raytha CMS allows an attacker to spoof or headers to attacker controlled domain. The attacker (who knows the victim's email address) can force the server to send an email with password reset link pointing to the domain from spoofed header. When victim clicks the link, browser sends request to the attacker’s domain with the token in the path allowing the attacker to capture the token. This allows the attacker to reset victim's password and take over the victim's account. This issue was fixed in version 1.4.6.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 16, 2026 · NIST NVD

    Detected

    Raytha CMS allows an attacker to spoof or headers to attacker controlled domain. The attacker (who knows the victim's email address) can force the server to send an email with password reset link pointing to the domain from spoofed header. When victim clicks the link, browser sends request to the attacker’s domain with the token in the path allowing the attacker to capture the token. This allows t

  2. Jun 17, 2026 · NIST NVD

    Updated

    Raytha CMS allows an attacker to spoof or headers to attacker controlled domain. The attacker (who knows the victim's email address) can force the server to send an email with password reset link pointing to the domain from spoofed header. When victim clicks the link, browser sends request to the attacker’s domain with the token in the path allowing the attacker to capture the token. This allows t

Affected

  • cpe raytha/raythaversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-69240

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-69240

    Raytha CMS allows an attacker to spoof or headers to attacker controlled domain. The attacker (who knows the victim's email address) can force the server to send an email with password reset link pointing to the domain from spoofed header. When victim cl

    nvd.nist.gov

References

CVE-2025-69240 · ZeroDay Findings