CNNVD-202602-325 Information

CNNVD ID

CNNVD-202602-325

CVE-2026-24665

  • CNNVD Published: 2026-02-03

Description (Chinese)

Open eClass是Greek Universities Network开源的一个电子课堂系统。 Open eClass 4.2之前版本存在跨站脚本漏洞,该漏洞源于存储型跨站脚本,可能导致执行恶意JavaScript。

Description (English)

Open eClass is an electronic classroom system that is an open source for Greek United Nations Network. The previous version of Open eClass 4.2 had a cross-site script loophole, which originated in a storage-type cross-site script and could lead to the execution of malicious JavaScript.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Greek Universities Network

Published

2026-02-03

Last Modified

2026-02-24

References

https://github.com/gunet/openeclass/security/advisories/GHSA-2qgm-m7fm-m888 https://access.redhat.com/security/cve/cve-2026-24665

Patch

https://github.com/gunet/openeclass/tags

Share on: