CVE-2026-9420
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A vulnerability was found in KLiK SocialMediaWebsite 1.0 in the HTTP GET Request Parameter Handler component. Manipulation leads to injection.
Risk Assessment
A remote attacker can inject malicious data, potentially leading to data integrity compromise or further attacks.
Recommendation
Update the software to the latest version. Sanitize all input parameters.
Other vulnerabilities in KLiK SocialMediaWebsite
See all- CVE-2026-9422High
In KLiK SocialMediaWebsite 1.0, an injection vulnerability exists in the HTTP POST request parameter handler. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-9421High
In KLiK SocialMediaWebsite 1.0, the uniqid function in upload.inc.php allows unrestricted file upload. The attack can be performed remotely, and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.