Loading product vulnerabilities…
Total
3
Critical
1
High
1
Medium
1
CISA KEV
0
kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.
kkcms 1.3 has jx.php?url= XSS.
kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.