Vulnerability · Published May 25, 2026 · Assigned by VulDB
CVE-2026-9422KLiK SocialMediaWebsite HTTP POST Request Parameter injection
High 7.3
In plain English
A high-severity injection in KLiK SocialMediaWebsite. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 76.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was identified in KLiK SocialMediaWebsite 1.0. This issue affects some unknown processing of the component HTTP POST Request Parameter Handler. Such manipulation leads to injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | KLiK SocialMediaWebsite | 1.0 |
Weakness: CWE-74, CWE-707 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-365403 | KLiK SocialMediaWebsite HTTP POST Request Parameter injection vdb-entry
- VDB-365403 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #813734 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 CRLF Injection third-party-advisory
- Submit #813736 | SourceCodester SourceCodester KLiK Social Media Website v1.0.1 CRLF Injection (Duplicate) third-party-advisory