A vulnerability described as critical has been identified in MoonShine 3.12.4. This affects an unknown function of the component SVG File Handler. Such manipulation leads to unrestricted upload.
This vulnerability is referenced as CVE-2025-51489. It is possible to launch the attack remotely. No exploit is available.
