CVE-2026-9420

A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Score

CVSS 3.1 6.3 Medium

Status

Deferred - cna@vuldb.com

Published

2026-05-25

Last modified

2026-05-26

Weaknesses

CWE-707, CWE-74

Affected products

• Klik Socialmediawebsite (Klik Socialmediawebsite)

References

• https://vuldb.com/submit/813723
• https://vuldb.com/submit/813730
• https://vuldb.com/submit/813731
• https://vuldb.com/submit/813732
• https://vuldb.com/vuln/365401
• https://vuldb.com/vuln/365401/cti