CVE-2025-40726

Cross-Site Scripting (XSS) reflected in Nosto PUBLISHED

Description (CNA)

Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.

Affected (CNA)

Vendor / product	Versions
Nosto / Nosto	affected All versions

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-reflected-nosto

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.