Vulnerability · Published May 25, 2026 · Assigned by VulDB
CVE-2026-9420KLiK SocialMediaWebsite HTTP GET Request Parameter injection
Medium 6.3
In plain English
A medium-severity injection in KLiK SocialMediaWebsite. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.2%top 84.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | KLiK SocialMediaWebsite | 1.0 |
Weakness: CWE-74, CWE-707 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-365401 | KLiK SocialMediaWebsite HTTP GET Request Parameter injection vdb-entry
- VDB-365401 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #813723 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 CRLF Injection third-party-advisory
- Submit #813730 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 CRLF Injection (Duplicate) third-party-advisory
- Submit #813731 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 CRLF Injection (Duplicate) third-party-advisory
- Submit #813732 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 CRLF Injection (Duplicate) third-party-advisory