# CVE-2026-9420

## Summary

- **CVE ID:** CVE-2026-9420
- **Severity:** MEDIUM
- **CVSS Score:** 7.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)
- **CWE:** CWE-74, CWE-707
- **Published:** May 25, 2026
- **Last Modified:** May 26, 2026

## Description

A vulnerability was found in KLiK SocialMediaWebsite 1.0. This affects an unknown part of the component HTTP GET Request Parameter Handler. The manipulation results in injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

## Affected Products

- n/a — KLiK SocialMediaWebsite (1.0)

## References

- [CNA](https://vuldb.com/vuln/365401)
- [CNA](https://vuldb.com/vuln/365401/cti)
- [CNA](https://vuldb.com/submit/813723)
- [CNA](https://vuldb.com/submit/813730)
- [CNA](https://vuldb.com/submit/813731)
- [CNA](https://vuldb.com/submit/813732)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.24%
- **EPSS Percentile:** 15.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._