CVE-2024-46331

ModStartCMS v8.8.0 is vulnerable to an open redirect vulnerability located in the redirect parameter of the /admin/login API endpoint. Attackers can exploit this by using a crafted URL to redirect users to an arbitrary, potentially malicious website. To mitigate this risk, it is recommended to di...

CVE-2025-55824

ModStartCMS v9.5.0 is affected by an arbitrary file write vulnerability. This flaw enables attackers to write malicious files to the server, which can lead to the execution of malicious commands and the subsequent theft of sensitive data . The vulnerability is associated with CWE-77 (Improper Neu...