CVE-2025-40726 | Nosto GET Request Parameter search-results-page q cross site scripting

A vulnerability was found in Nosto. It has been classified as problematic. This affects an unknown part of the file /pages/search-results-page of the component GET Request Parameter Handler. The manipulation of the argument q leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-40726. It is possible to initiate the attack remotely. There is no exploit available.