XSS in Powerschool Employee Access Center

CVE-2026-12425

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is poss…

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Weakness classification (CWE)

References