CVE-2025-11950

The CVE-2025-11950 entry describes a Reflected XSS in KNOWHY EduAsist (EduAsist: through 27022026). Affected component: web page generation/input handling; root cause: improper neutralization of input during web page generation. Impact as stated: Low confidentiality, integrity, and availability i...

KNOWHY EduAsist 跨站脚本漏洞

KNOWHY EduAsist is an AI teaching assistant developed by KNOWHY Company in Turkey. Versions of KNOWHY EduAsist prior to 27022026 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input during web page generation, which could lead to reflective cross-site...