Protect yourself
from bad websites
from bad websites
Award winning security extension for your browser
(100% Free. No in-app payments or subscriptions)
7,000+ reviews
in Google Chrome
1,200,000+ users
have installed WOT and are browsing safely
Detect phishing scams and malware
Know which internet shops you can trust
Rate websites!
Help clean the internet
Help clean the internet
EDIT: The following now only works with links and basic text formatting. It's still an issue, but not as critical now.
Using specially crafted URLs one can perform an XSS attack on the Email Logs page (when signed in).
For example, http://www.teacherease.com/parents/EmailLogViewAll.aspx?infomessage=%3Ciframe%20width=1000%20height=500%20src=%27https://www.google.com/%27%3E%3C/iframe%3E shows Google in an embedded iframe.
Using NoScript will protect against this attack.
My school used this last year, but now switched to renweb. I extremely dislike renweb, do not use renweb, teacher-ease is far superior.