KLiK SocialMediaWebsite version 1.0 contains a flaw in its HTTP POST Request Parameter Handler that permits attackers to manipulate input parameters and inject arbitrary payloads. The injection flaw is associated with CWE‑74 and CWE‑707 and could enable an attacker to alter the behavior of the application, potentially leading to compromise of confidentiality, integrity, or availability. The flaw is remotely exploitable and public exploits are available.

This vulnerability affects KLiK SocialMediaWebsite 1.0. No other versions are listed in the CNA data, and the input indicates that the issue is confined to the HTTP POST handling component of that specific release.

With a CVSS score of 6.9 the vulnerability carries moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. The publicly available exploit and remote attack vector suggest that the risk to systems exposed to the internet remains significant, especially if the application processes untrusted input without adequate validation.