PT-2025-33738 · Moonshine · Moonshine
CVSS v3.1
4.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
MoonShine version 3.12.3
Description:
A stored cross-site scripting (XSS) vulnerability exists in the Create Article function. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the
Link parameter.Recommendations:
Update to a newer version that contains a fix for this issue. As a temporary workaround, consider sanitizing the
Link parameter input to prevent the injection of malicious scripts.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Moonshine