Read the docs

W. W. Norton

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

W. W. Norton records in CISA KEV

No W. W. Norton vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Inquizitive 2 records HIGH

Records

2 records

TI-2025-23842 CVE-2025-32808 · GHSA-8v47-p595-5p8g

W.

Priority HIGH 67

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00412 Published 2025-04-11 No fix listed CWE-602
TI-2025-23843 CVE-2025-32809 · GHSA-xr5v-6j2h-c7g8

Cross-site scripting in W. W. Norton InQuizitive

Priority MEDIUM 62

W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00284 Published 2025-04-11 No fix listed CWE-79
Open these records in search →