Nosto

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nosto records in CISA KEV

No Nosto vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-27194 CVE-2025-40726 · GHSA-42hj-3h64-h789

Cross-Site Scripting (XSS) reflected in Nosto

LOW 31

Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00808 Published 2025-06-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0