VULNERABILITY INTELLIGENCE

CVE-2025-11950

CVSS score6.3 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2026-02-27

Last modified2026-06-17

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS. This issue affects EduAsist: before v2.1.