Skip to content
OpenAdvisories

Package · Packagist

moonshine/moonshine

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.9
    CVE-2025-51488

    moonshine Stored Cross-Site Scripting Vulnerability in Create Admin

    A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin.

    moonshine/moonshine Packagist
  • Medium 4.5
    CVE-2025-51487

    moonshine Stored Cross-Site Scripting Vulnerability in Create Article

    A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new…

    moonshine/moonshine Packagist
  • Medium 4.5
    CVE-2025-51489

    MoonShine Arbitrary File Upload Vulnerability

    A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/updating an Article and correctly execute arbitrary JavaScript when the file link is opened.

    moonshine/moonshine Packagist
  • Medium 4.9
    CVE-2025-51510

    MoonShine SQL Injection Vulnerability

    MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (version < 2.0.2) component.

    moonshine/moonshine Packagist