CVE-2026-24674
Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
03 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a Reflected Cross-Site Scripting (XSS) vulnerability allows remote attackers to execute arbitrary JavaScript in the context of authenticated users by crafting malicious URLs and tricking victims into visiting them. This issue has been patched in version 4.2.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Productos afectados
gunet · openeclass¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →