CVE-2026-9420

6.3 MEDIUM

A vulnerability was found in KLiK SocialMediaWebsite 1.0

Published: 2026-05-25 · Last updated: 2026-05-26

Severity and scoring

CVSS: 6.3 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CWE: CWE-707, CWE-74

Description

A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-9420
[Other]https://vuldb.com/submit/813723
[Other]https://vuldb.com/submit/813730
[Other]https://vuldb.com/submit/813731
[Other]https://vuldb.com/submit/813732
[Other]https://vuldb.com/vuln/365401
[Other]https://vuldb.com/vuln/365401/cti

Related CVEs

Same CWE

CVE-2026-12223 — A vulnerability was identified in Yealink SIP-T46U 108.86.0.118 (5.5 MEDIUM)
CVE-2026-12219 — A flaw has been found in Yealink SIP-T46U 108.86.0.118 (6.3 MEDIUM)
CVE-2026-12206 — A vulnerability was identified in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
CVE-2026-12197 — A security flaw has been discovered in Ruijie EG105G-P 2.340 (7.2 HIGH)
CVE-2026-12188 — A vulnerability was detected in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)