| Package | Affected versions | Patched versions |
|---|---|---|
| employee access center | = 23.10 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is possible to add in javascript code after the login URL and have it be eval()'d in the page and execute in the context of the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free