CVE-2019-16706: Kkcms Project Kkcms

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

kkcms v1.3 has a CSRF vulnerablity that can add an user account via admin/cms_user_add.php.

Affected products

• Kkcms Project Kkcms: version 1.3 only

Published 2019-09-23. Last modified 2026-06-17.