Kkcms Project Kkcms — known CVE vulnerabilities

Every CVE whose affected-product data names Kkcms Project Kkcms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-32101 — CVSS 9.8 (critical): kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.
• CVE-2019-16706 — CVSS 8.8 (high): kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.
• CVE-2019-16923 — CVSS 6.1 (medium): kkcms 1.3 has jx.php?url= XSS.