VULNERABILITY INTELLIGENCE

CVE-2025-32809

CVSS score6.4 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2025-04-11

Last modified2026-06-17

Description

W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id.