Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-11950 EUVD-2025-208139GHSA-99wh-hc39-j65q

Reflected XSS in Knowhy's EduAsist

Published Feb 27, 2026 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS.

This issue affects EduAsist: before v2.1.

Affected products

VendorProductAffectedFixed
KNOWHY Advanced Technology Trading Ltd. Co. EduAsist < v2.1 v2.1

References