CVE-2026-9422
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
In KLiK SocialMediaWebsite 1.0, an injection vulnerability exists in the HTTP POST request parameter handler. The attack can be launched remotely and the exploit is publicly available.
Risk Assessment
An attacker can perform unauthorized operations on the server, potentially taking control of the application.
Recommendation
Apply input filtering and sanitization, and update the software if a newer version is available.
Other vulnerabilities in KLiK SocialMediaWebsite
See all- CVE-2026-9421High
In KLiK SocialMediaWebsite 1.0, the uniqid function in upload.inc.php allows unrestricted file upload. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-9420Medium
A vulnerability was found in KLiK SocialMediaWebsite 1.0 in the HTTP GET Request Parameter Handler component. Manipulation leads to injection.
Original NVD description (English source)
A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. The attack can be launched remotely. The exploit is publicly available and might be used.