Developers on GitHub identified a Cross-Site Scripting (XSS) vulnerability in Lexia PowerUp. This allows users to execute custom JavaScript (like bookmarklets) by manipulating URL parameters, which could theoretically be used to bypass certain program restrictions.

By being honest and working hard, students can get the most out of Lexia and other educational software, and develop the skills they need to succeed.