UNKNOWNCVSS not yet scoredVulnerability
CVE-2025-52097
Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00299
- Cve id
- CVE-2025-52097
- First seen by Signal
- 2026-10-18T13:39:03+00:00
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Published at
- 2026-10-16T15:16:50.360
- Last modified
- 2026-10-16T19:56:15.773
- Epss percentile
- 0.2126
Explore deeper with Ninja Signal's threat intelligence graph