medium6.4
CVE-2025-32809
W.
Impact
W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wwnorton | Inquizitive | through 2025-04-08 |