CVE-2025-51488
1 advisory.
Packagist/moonshine/moonshine CVE-2025-51488: medium 4.9, EPSS 0.56%
moonshine Stored Cross-Site Scripting Vulnerability in Create Admin
Action: Upgrade moonshine/moonshine to 3.12.14 or later.
composer require moonshine/moonshine:3.12.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.14 | - |
Fixed versions
| 3.12.14 |
Sources
- osv: GHSA-rh9f-gr6q-mpc4
- https://nvd.nist.gov/vuln/detail/CVE-2025-51488
- https://github.com/moonshine-software/moonshine/commit/f108f4ea5c0d66e8172c2dc397c1d9a6f466d9c6
- https://github.com/GiacoLenzo2109/MoonShine_Software_PoCs
- https://github.com/moonshine-software/moonshine
CVE-2025-51488 · published · modified · JSON