← Back

Powerschool

powerschool

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Powerschool Mobile
powerschool_mobile
1 CVE
Employee Access Center
employee_access_center
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-12425
1Powerschool
1Employee Access Center
Jun 26, 2026
Jun 16, 2026
5.7 MEDIUM· v4
6.1 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center...Show more
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is possible to add in javascript code after the login URL and have it be eval()'d in the page and execute in the context of the user.Show less
CVE-2019-17396
1Powerschool
1Powerschool Mobile
Jun 17, 2026
Oct 15, 2019
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.