KLiK vulnerabilities

Products

• SocialMediaWebsite 1

Latest KLiK CVEs

Newest publication first

1. CVE-2026-7002 KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection

   Published 2026-04-25

   Medium·CVSS 6.9 EPSS 0.25%

   A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private Message Handler. Executing a manipulation of the argument c_id can lead to sql injection. It is possi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.