Kkcms Project Kkcms
3 CVEs affecting Kkcms Project Kkcms. Latest disclosed: 2022-06-15. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32101 | Critical | 9.8 | 2022-06-15 | kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php. |
CVE-2019-16706 | High | 8.8 | 2019-09-23 | kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php. |
CVE-2019-16923 | Medium | 6.1 | 2019-09-27 | kkcms 1.3 has jx.php?url= XSS. |