Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/08/21 12:26 a.m.•38 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS5.8AI score0.0043EPSS
SaveExploits2References1
NVD
NVD
•added 2025/08/19 3:15 p.m.•22 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS0.0043EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/08/19 12:00 a.m.•24 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

0.0043EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/08/19 12:00 a.m.•7 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

5.3AI score0.0043EPSS
SaveExploits2References2
Mend
Mend
•added 2025/08/19 12:00 a.m.•6 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

6.8CVSS0.0043EPSS
SaveExploits2References5
CVE
CVE
•added 2025/08/19 12:00 a.m.•44 views

CVE-2025-51487

A Stored Cross-Site Scripting (XSS) vulnerability exists in the moonshine/moonshine Laravel administration panel (versions

4.5CVSS5.3AI score0.0043EPSS
SaveExploits2References2Affected Software1
OSV
OSV
•added 2025/08/19 12:00 a.m.•12 views

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS5.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/19 12:00 a.m.•5 views

CVE-2025-51487: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

4.5CVSS6.3AI score0.0043EPSS
SaveExploits2References1
Rows per page
Query Builder