CVE-2019-16706

Name of the Vulnerable Software and Affected Versions kkcms version 1.3

Description The issue allows an attacker to add a user account via "admin/cms user add.php" due to a CSRF flaw.

Recommendations For version 1.3, consider implementing proper CSRF protection mechanisms to prevent unauthorized actions, such as adding a user account via the "admin/cms user add.php" endpoint. As a temporary workaround, restrict access to the "admin/cms user add.php" endpoint to minimize the risk of exploitation.