← Database

CVE-2025-40726

N/A CVSS: N/A Published: 2025-06-16 Modified: 2026-06-17

Description

Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.

Affected Platforms

Unknown

Weakness Type

CWE-79

References