← Database

CVE-2025-32809

MEDIUM CVSS: 6.4 Published: 2025-04-11 Modified: 2026-06-17

Description

W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id.

Affected Platforms

Wwnorton Inquizitive

Weakness Type

CWE-79

References