CVE-2025-52097

Description

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

Traduire en français

Références

• http://instantasp.com
• http://instantforumnet.com
• https://github.com/rwilsonecs/CVE-2025-52097/blob/main/ADVISORY.md

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories