Read the docs

Moonshine

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Moonshine records in CISA KEV

No Moonshine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Moonshine 3 records MEDIUM

Records

3 records in Moonshine · all components

TI-2025-32346 CVE-2025-51489 · GHSA-8xfq-7f6m-mpmf

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5…

Priority MEDIUM 58

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/updating an Article and correctly execute arbitrary JavaScrip…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2025-08-19 Fixed in 3.12.5 CWE-434
TI-2025-32345 CVE-2025-51488 · GHSA-rh9f-gr6q-mpc4

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4…

Priority MEDIUM 56

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00559 Published 2025-08-19 Fixed in 3.12.14 CWE-79
TI-2025-32344 CVE-2025-51487 · GHSA-p632-58pp-c9xg

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5…

Priority MEDIUM 54

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link…

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.0043 Published 2025-08-19 Fixed in 3.12.4 CWE-79
Open these records in search →