CVE-2025-40726

Publication date

2025-06-16 08:26:49

Family

INCIBE

State

PUBLISHED

Description

Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.