documents a Cross-Site Scripting (XSS) flaw in Lexia PowerUp. This allows users to execute arbitrary JavaScript code via the parameter, which some use to trigger custom bookmarklets. Data Tracking Methods
One of the most powerful features of Lexia is its ability to create a personalized reading plan for each learner. To get the most out of this feature, make sure to: lexia hacks github