Arbitrary file upload in Klik Socialmediawebsite
CVE-2026-9421
A vulnerability was determined in KLiK SocialMediaWebsite 1.0. This vulnerability affects the function uniqid of the file upload.inc.php of the component File Handler. This manipulation causes unrestricted upload. The attack can be initiat…
EPSS: 0.000 (14.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- N/a Klik Socialmediawebsite — versions 1.0
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-9421?
- CVE-2026-9421 is a high-severity vulnerability in Klik Socialmediawebsite, classified under Improper Access Control. CVSS score: 7.3/10. Published 2026-05-25.
- How severe is CVE-2026-9421?
- High severity. CVSS v3 base score is 7.3 out of 10.