Raytha CMS Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Raytha CMS, affecting all versions prior to 1.4.6. This vulnerability allows an attacker to craft a malicious website that, when visited by an authenticated user, automatically sends a POST request to a specified endpoint, such as data deletion, without proper token verification. As a result, the attack can be executed without the user's consent or knowledge.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the authenticated user, such as deleting data or modifying content.

Remediation

Users can upgrade to Raytha CMS version 1.4.6 or later to address this vulnerability.