{"id":"CVE-2025-52097","published":"2026-10-16T15:16:50.360","lastModified":"2026-10-16T19:56:15.773","description":"Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"http://instantasp.com","tags":[]},{"url":"http://instantforumnet.com","tags":[]},{"url":"https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md","tags":[]}],"hasPoc":true,"ai":null}