Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/08/21 12:26 a.m.•41 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS6.6AI score0.0043EPSS
SaveExploits2References1
NVD
NVD
•added 2025/08/19 3:15 p.m.•26 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS0.0043EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2025/08/19 12:00 a.m.•17 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS5.7AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/08/19 12:00 a.m.•26 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

0.0043EPSS
SaveExploits2References2
CVE
CVE
•added 2025/08/19 12:00 a.m.•47 views

CVE-2025-51487

A Stored Cross-Site Scripting (XSS) vulnerability exists in the moonshine/moonshine Laravel administration panel (versions

4.5CVSS6.6AI score0.0043EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/19 12:00 a.m.•7 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

6.6AI score0.0043EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•6 views

CVE-2025-51487: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS6.6AI score0.0043EPSS
SaveExploits2References1
Mend
Mend
•added 2025/08/19 12:00 a.m.•11 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

6.8CVSS6.6AI score0.0043EPSS
SaveExploits2References5
Rows per page
Query Builder