CVE-2025-55824: Modstart Mostartcms

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server.

Affected products

• Modstart Mostartcms: version 9.5.0 only

Published 2025-09-02. Last modified 2026-06-17.