msaad1999/KLiK-SocialMediaWebsite

msaad1999/KLiK-SocialMediaWebsite

Releases1

Frequency

Last Release over 7 years ago

Stars379

Complete PHP-based Login/Registration system, Profile system, Chat room, Forum system and Blog/Polls/Event Management System.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-26472 ↗	Feb 29, 2024Thursday, 29 February 2024, 01:44	6.1 MEDIUM	—
KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' or 'validator' parameters of 'create-new-pwd.php'.
CVE-2024-26473 ↗	Feb 29, 2024Thursday, 29 February 2024, 01:44	6.1 MEDIUM	—
A reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows attackers to inject malicious JavaScript into the web browser of a victim via the poll parameter in poll.php.
CVE-2022-42099 ↗	Nov 29, 2022Tuesday, 29 November 2022, 04:15	5.4 MEDIUM	—
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input.
CVE-2022-42100 ↗	Nov 29, 2022Tuesday, 29 November 2022, 04:15	5.4 MEDIUM	—
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form.
CVE-2022-42098 ↗	Nov 22, 2022Tuesday, 22 November 2022, 13:15	8.8 HIGH	—
KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.