CVE-2025-51510: Getmoonshine Moonshine

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moonshine-tree-resource (version < 2.0.2) component.

Affected products

• Getmoonshine Moonshine: before 2.0.2 (fixed in 2.0.2)

Published 2025-08-19. Last modified 2026-06-17.