CVE-2025-11950

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS.This issue affects EduAsist: before v2.1...

EUVD-2025-208139

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS.This issue affects EduAsist: through 27022026. NOTE: The vendor was contacted early about this disclosure but did no...

CVE-2025-11950

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS. This issue affects EduAsist: before v2.1...

CVE-2025-11950 Reflected XSS in Knowhy's EduAsist

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS. This issue affects EduAsist: before v2.1...

CVE-2025-11950

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS. This issue affects EduAsist: before v2.1...

CVE-2025-11950 Reflected XSS in Knowhy's EduAsist

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS. This issue affects EduAsist: before v2.1...

CVE-2025-11950

The CVE-2025-11950 entry describes a Reflected XSS in KNOWHY EduAsist (EduAsist: through 27022026). Affected component: web page generation/input handling; root cause: improper neutralization of input during web page generation. Impact as stated: Low confidentiality, integrity, and availability i...

KNOWHY EduAsist 跨站脚本漏洞

KNOWHY EduAsist is an AI teaching assistant developed by KNOWHY Company in Turkey. Versions of KNOWHY EduAsist prior to 27022026 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper input during web page generation, which could lead to reflective cross-site...

PT-2026-22337

Name of the Vulnerable Software and Affected Versions KNOWHY Advanced Technology Trading Ltd. Co. EduAsist versions through 27022026 Description EduAsist is susceptible to a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows an...