Description
W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus description, feedback.choice_fb[], or question_id.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| W. W. Norton | InQuizitive | ≤ 2025-04-08 | — |