CVE-2024-26472

KLiK SocialMediaWebsite v1.0.1 (msaad1999) is vulnerable to a reflected cross-site scripting (XSS) flaw. The issue arises when a malicious payload is supplied in the selector or validator parameters of create-new-pwd.php, enabling an attacker to execute arbitrary JavaScript in a user’s browser. T...