2 matches found
CVE-2019-16706
kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.
CVE-2019-16923
kkcms 1.3 has jx.php?url= XSS.