UNKNOWN NVD

CVE-2025-52097

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input fr

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

References

http://instantasp.com
http://instantforumnet.com
https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md

Published: 2026-10-16 · Source: NVD · Feed updated: 2026-10-16

This unknown severity vulnerability was published on 2026-10-16 via NVD.

vulnfeed aggregates 16278 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.