← Database

CVE-2025-29526

MEDIUM CVSS: 6.1 Published: 2025-04-23 Modified: 2026-06-17

Description

A Cross-Site Scripting (XSS) vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting a crafted payload into the SearchTerm parameter.

Affected Platforms

Unknown

Weakness Type

CWE-79

References