Vendors / Modstart Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Modstart records in CISA KEV No Modstart vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00579 · Published 2024-09-27 · No fix listed CWE-601
Priority LOW 30
ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00252 · Published 2025-09-02 · No fix listed CWE-77
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0