https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T13:07:09.019453+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-12425 CVE-2026-12425 — Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center 23.10 2026-10-10T13:07:09.058380+00:00

Affected: PowerSchool Employee Access Center

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is possible to add in javascript code after the login URL and have it be eval()'d in the page and execute in the context of the user.