This vulnerability in KLiK SocialMediaWebsite 1.0 involves injection via the HTTP GET Request Parameter Handler. Remote attackers can exploit this flaw by manipulating HTTP GET parameters to inject malicious input. The vulnerability is publicly disclosed but lacks an official fix or vendor advisory. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required, user interaction required, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to inject malicious input remotely, potentially affecting the integrity or confidentiality of the application data. However, the impact is rated as low to medium across confidentiality, integrity, and availability, reflecting limited but non-negligible risk. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting or validating HTTP GET parameters where possible and monitor for updates from the vendor. No official remediation or temporary fix has been published.