Report: CVE-2026-7002 - KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection - Complete Guide

Report: CVE-2026-7002 - KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection - Complete Guide

CVE ID :CVE-2026-7002 Published : April 25, 2026, 10:16 p.m. | 45 minutes ago Description :A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private Message Handler. Executing a manipulation of the argument c_id can lead to sql injection. It is possible to launch the attack remotely. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
April 25, 2026
Affected Product: php
Impact: sql injection