Every CVE whose affected-product data names Wwnorton Inquizitive, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2025-32808 — CVSS 7.7 (high): W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into the backend, because…
CVE-2025-32809 — CVSS 6.4 (medium): W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description…