PT-2026-22337 · Knowhy Advanced Technology Trading · Eduasist

Kutay Ergen · Published 2026-02-27 · Updated 2026-03-09 · CVE-2025-11950

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions KNOWHY Advanced Technology Trading Ltd. Co. EduAsist versions through 27022026

Description EduAsist is susceptible to a Reflected Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows an attacker to inject malicious scripts into web pages viewed by other users. The vendor was contacted regarding this issue but did not respond.

Recommendations Versions prior to 27022026 should be updated.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-11950

Affected Products

Eduasist

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11950 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11950 · Vendor Advisory
• https://t.me/CVEtracker/45979 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0086 · Note
• https://t.me/cveNotify/154764 · Telegram Post
• https://twitter.com/CVEnew/status/2027380152980709779 · Twitter Post
• https://t.me/cveNotify/153463 · Telegram Post