A vulnerability exists in the HTTP GET request handling component of KLiK SocialMediaWebsite 1.0, allowing injection of malicious input through URL parameters. The flaw is rooted in missing input validation (CWE-74) and may result in information leakage (CWE-707). Attackers can exploit this remotely by manipulating GET requests to inject code or data, which does not necessarily lead to code execution but can compromise confidentiality or enable further attacks if combined with other weaknesses.

KLiK SocialMediaWebsite 1.0 is the product identified as vulnerable. The flaw resides in the component that processes HTTP GET request parameters. No other versions are mentioned as affected.

The CVSS base score is 5.3, indicating moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, but it is publicly known and can be exploited remotely via HTTP GET requests. Attackers can use the vulnerability to inject malicious input, potentially leading to higher impact if additional weaknesses exist.