CVE-2026-7002: Klik Socialmediawebsite

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private Message Handler. Executing a manipulation of the argument c_id can lead to sql injection. It is possible to launch the attack remotely.

Affected products

• Klik Socialmediawebsite: version 1.0.0 only; version 1.0.1 only

Published 2026-04-25. Last modified 2026-06-17.