Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-32809

W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wwnorton
Products
Inquizitive
CVE-2025-32808

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because only client-side access control exists.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Wwnorton
Products
Inquizitive