CVE-2024-31777: Openeclass

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint.

Affected products

• Openeclass Openeclass: up to and including 3.15

Published 2024-06-13. Last modified 2026-06-17.