The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Scripting (XSS) vulnerability allows remote attackers to execute arbitrary JavaScript in the context of authenticated users by crafting malicious URLs and tricking victims into visiting them. This issue has been patched in version 4.2.
References
| Link | Resource |
|---|---|
| https://github.com/gunet/openeclass/security/advisories/GHSA-gqvp-w22w-w99r | Vendor Advisory Exploit |
Configurations
History
10 Feb 2026, 17:26
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gunet:open_eclass_platform:*:*:*:*:*:*:*:* | |
| First Time |
Gunet
Gunet open Eclass Platform |
|
| References | () https://github.com/gunet/openeclass/security/advisories/GHSA-gqvp-w22w-w99r - Vendor Advisory, Exploit |
03 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-03 18:16
Updated : 2026-02-10 17:26
NVD link : CVE-2026-24674
Mitre link : CVE-2026-24674
CVE.ORG link : CVE-2026-24674
JSON object : View
Products Affected
gunet
- open_eclass_platform
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')