CVE Intelligence

Powerschool Employee Access Center vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Powerschool Employee Access Center: 1 record(s), with affected versions and fixes.
cpe:2.3:a:powerschool:employee_access_center

CVE-2026-12425 Medium · 6.1 CWE-79 Jun 16, 2026
Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center 23.10
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is possible to add in javascript code after the login URL and have it be eval()'d in the page and execute in the context of the user.