EduSoho vulnerabilities

1 known vulnerability in EduSoho from Hangzhou Kuozhi Network Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  EduSoho: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-7335Jan 22, 2026Hangzhou Kuozhi Network TechnologyEPSS 1.74%

  EduSoho versions prior to 22.4.7 contain an arbitrary file read vulnerability in the classroom-course-statistics export functionality. A remote, unauthenticated attacker can supply crafted path traversal sequences in the fileNames[] parameter to read arbitrary