Microsoft’s Education site suffered from a cross site scripting vulnerability.