kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.

Published Jun 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre