Gunet Openeclass vulnerabilities

• gunet open eclass platform, openeclass +1 more Open eClass Insecure Password Reset Token Reuse Enables Account Takeover CVE-2026-24669 7.8 HighFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass Broken Access Control Allows Students to Add Content to Course Units CVE-2026-24668 6.5 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access CVE-2026-24667 5.0 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions CVE-2026-24666 6.5 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload CVE-2026-24665 8.7 HighFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities CVE-2026-24774 4.3 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files CVE-2026-24773 7.5 HighFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints CVE-2026-24674 4.7 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction CVE-2026-24673 4.3 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields CVE-2026-24672 7.3 HighFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields CVE-2026-24671 6.1 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units CVE-2026-24670 6.5 MediumFebruary 3, 2026
• gunet open eclass platform, openeclass +1 more Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies CVE-2026-24664 5.3 MediumFebruary 3, 2026
• gunet openeclass Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE) CVE-2026-22241 Public exploit 7.3 HighJanuary 8, 2026
• gunet open eclass platform, openeclass +1 more Open eClass Platform allows Arbitrary File Upload in "modules/h5p/save.php" CVE-2024-38530 9.8 CriticalAugust 12, 2024