gunet openeclass

• CVE-2026-24669 High 7.8 Open eClass Insecure Password Reset Token Reuse Enables Account Takeover 0.2%
• CVE-2026-24668 Medium 6.5 Open eClass Broken Access Control Allows Students to Add Content to Course Units 0.2%
• CVE-2026-24667 Medium 5.0 Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access 0.2%
• CVE-2026-24666 Medium 6.5 Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions 0.2%
• CVE-2026-24665 High 8.7 Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload 0.2%
• CVE-2026-24774 Medium 4.3 Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities 0.2%
• CVE-2026-24773 High 7.5 Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files 0.4%
• CVE-2026-24674 Medium 4.7 Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints 0.2%
• CVE-2026-24673 Medium 4.3 Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction 0.3%
• CVE-2026-24672 High 7.3 Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields 0.2%
• CVE-2026-24671 Medium 6.1 Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields 0.2%
• CVE-2026-24670 Medium 6.5 Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units 0.2%
• CVE-2026-24664 Medium 5.3 Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies 0.3%
• CVE-2026-22241 High 7.3 Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE) 3.3%
• CVE-2024-38530 Critical 9.8 Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php" 0.8%