CVE-2025-52097

CVE-2025-52097

published October 16, 2026

CVSS
—
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Published
2026-10-16T19:16Z
References (3)
http://instantasp.com · [email protected]http://instantforumnet.com · [email protected]https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md · [email protected]
EPSS history
Timeline
  • 18 OCT 03:25Z
    EPSS moved — → 0%
    epss
  • 16 OCT 00:00Z
    Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input…
    cvelistv5
  • 16 OCT 00:00Z
    Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input…
    cvelistv5