Security Advisory

CVE-2025-51488

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-19 00:00:00

Last updated 2025-08-20 19:00:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin.

← Browse all CVEs View on cve.org ↗