Raytha CMS Reflected Cross-Site Scripting Vulnerability in Logon Functionality

A reflected cross-site scripting vulnerability has been identified in Raytha CMS, affecting all versions prior to 1.4.6. The issue arises in the logon functionality, where the returnUrl parameter can be exploited. An authenticated attacker can craft a malicious URL that, when opened by a victim, executes arbitrary JavaScript in the victim's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious JavaScript in the context of the victim's browser.

Remediation

Users can upgrade to Raytha CMS version 1.4.6 or later to address this vulnerability.