Raytha CMS Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Raytha CMS, affecting all versions prior to 1.4.6. The issue arises in the backToListUrl parameter, where an attacker can create a malicious URL that, when accessed by an authenticated user, executes arbitrary JavaScript in the user's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious scripts in the context of the victim's browser.

Remediation

Users can upgrade to Raytha CMS version 1.4.6 or later to address this vulnerability.