PT-2019-14782

Name of the Vulnerable Software and Affected Versions kkcms version 1.3 Description The issue allows an attacker to add a user account via "admin/cms user add.php" due to a CSRF flaw. Recommendations For version 1.3, consider implementing proper CSRF protection mechanisms to prevent unauthorized...