Beveiligingsadvies

CVE-2026-12425

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-16 18:34:28

Laatst bijgewerkt 2026-06-17 15:04:57

Toegewezen door palo_alto

CVSS-score 5.7

Status PUBLISHED

Beschrijving

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is possible to add in javascript code after the login URL and have it be eval()'d in the page and execute in the context of the user.

← Alle CVE's bekijken Bekijk op cve.org ↗