CVE-2025-52097

Açıklama (NVD)

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

Yayın: 16.10.2026 · Son değişiklik: 27.10.2026

Referanslar

• http://instantasp.com
• http://instantforumnet.com
• https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md