PatchTheCVEmoonshine vulnerabilities and fixes
Recent CVEs affecting moonshine, with upgrade or downgrade steps. 4 tracked.
moonshine has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-08-19. Highest priority: CVE-2025-51488 (score 34/100).
- CVE-2025-51510 MEDIUM 4.9 UPGRADE MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using
- CVE-2025-51489 MEDIUM 5.4 UPGRADE A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attack
- CVE-2025-51488 MEDIUM 4.9 UPGRADE A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attack
- CVE-2025-51487 MEDIUM 4.5 UPGRADE A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute ar
FAQ
How do I fix moonshine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is moonshine being exploited right now?
None of the tracked moonshine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which moonshine CVE should I patch first?
CVE-2025-51488 currently ranks highest (34/100): A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attack.