PT-2026-42999 · Unknown · Klik Socialmediawebsite

G111 · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9421

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions KLiK SocialMediaWebsite version 1.0

Description An issue exists in the File Handler component within the uniqid() function of the upload.inc.php file. This flaw allows for unrestricted file upload, which can be initiated remotely.

Recommendations As a temporary workaround, consider restricting access to the upload.inc.php file or disabling the uniqid() function within the File Handler component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-9421

Affected Products

Klik Socialmediawebsite

References · 5

• https://twitter.com/CVEnew/status/2058935296046055832 · Twitter Post
• https://vuldb.com/submit/813725 · Note
• https://twitter.com/infoflowcloud/status/2058936387227791863 · Twitter Post
• https://vuldb.com/vuln/365402/cti · Note
• https://vuldb.com/vuln/365402 · Note