Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Moonshine Clear all filters
TI-2025-32346 CVE-2025-51489 · GHSA-8xfq-7f6m-mpmf

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5…

Priority MEDIUM 58

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/updating an Article and correctly execute arbitrary JavaScrip…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2025-08-19 Fixed in 3.12.5 CWE-434
TI-2025-32345 CVE-2025-51488 · GHSA-rh9f-gr6q-mpc4

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4…

Priority MEDIUM 56

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00559 Published 2025-08-19 Fixed in 3.12.14 CWE-79
TI-2025-32344 CVE-2025-51487 · GHSA-p632-58pp-c9xg

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5…

Priority MEDIUM 54

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link…

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.0043 Published 2025-08-19 Fixed in 3.12.4 CWE-79