← back
CVE-2026-9420

KLiK SocialMediaWebsite HTTP GET Request Parameter injection

CVSS 5.3 MEDIUMEPSS 0.2%CWE-707CWE-74
A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · KLiK SocialMediaWebsite

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://vuldb.com/submit/813723https://vuldb.com/submit/813730https://vuldb.com/submit/813731https://vuldb.com/submit/813732https://vuldb.com/vuln/365401https://vuldb.com/vuln/365401/cti