CVE-2026-7002 — KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection

CVE-2026-7002

KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection PUBLISHED

Description (CNA)

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private Message Handler. Executing a manipulation of the argument c_id can lead to sql injection. It is possible to launch the attack remotely.

Affected (CNA)

Vendor / product	Versions
KLiK / SocialMediaWebsite	affected 1.0.0; affected 1.0.1

CWE

CWE-89, CWE-74

References

https://vuldb.com/vuln/359561
https://vuldb.com/vuln/359561/cti
https://vuldb.com/submit/797302

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.