Vulnerability · Published Feb 27, 2026 · Assigned by TR-CERT
CVE-2025-11950Reflected XSS in Knowhy's EduAsist
Medium 6.3
In plain English
A medium-severity cross-site scripting in EduAsist from KNOWHY Advanced Technology Trading Ltd. Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.2%top 86.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS. This issue affects EduAsist: before v2.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KNOWHY Advanced Technology Trading Ltd. Co. | EduAsist | 0 – before v2.1 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
References
- https://www.usom.gov.tr/bildirim/tr-26-0086 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0086 government-resource