Skip to content
OpenAdvisories

Vendor

Nosto

1 known vulnerabilities.

Products

Nosto 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40726

    Cross-Site Scripting (XSS) reflected in Nosto

    Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.

    Nosto Nosto