CVE-2024-26471: MSAAD1999 Klik Socialmediawebsite

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php.

Affected products

• MSAAD1999 Klik Socialmediawebsite: version 1.0.1 only

Published 2024-02-29. Last modified 2026-06-17.