CVE-2025-52097
CVE-2025-52097
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding
EPSS 0.3%
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published