Unrated severityNVD Advisory· Published Oct 16, 2026

CVE-2025-52097

Description

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Instantasp/Instantforumllm-fuzzy
Range: =4.1.4

Patches

Vulnerability mechanics

References

instantasp.comnvd
instantforumnet.comnvd
github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000