CVE-2021-44266: Gunet Open Eclass Platform

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

Affected products

• Gunet Open Eclass Platform: before 3.12.2 (fixed in 3.12.2)

Published 2022-06-11. Last modified 2026-06-17.