CVE-2025-51510
MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (version < 2.0.2) component.
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de moonshine/moonshine
Vulnerabilidades publicadas para moonshine/moonshine en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 4
CVE-2025-51489
A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upload a malicious SVG file when creating/updating an Article and correctly execute arbitrary JavaScript when the file link is opened.
- Actualiza a 3.12.5
Publicación ActualizaciónCVE-2025-51488
A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin.
- Actualiza a 3.12.14
Publicación ActualizaciónCVE-2025-51487
A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article.
- Actualiza a 3.12.4
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.