W. W. Norton

2 CVEs in 1 W. W. Norton product, including Inquizitive. Newest: CVE-2025-32809 (2025-04-11). Severity, EPSS and public exploits for each.

W. W. Norton products with known CVEs

ProductCVEs
Inquizitive2
W. W. Norton CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-32809Medium6.42025-04-11W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or q…
CVE-2025-32808High7.72025-04-11W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side ac…