Verified

CVE-2025-52097: n/a n/a

Affected technology

n/a · n/a
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

An attacker can execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding.

Published 16-Oct-2026 16:14 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 16:12:45.293412+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-52097.html