CVE-2025-65734: Openeclass

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file.

Affected products

• Openeclass Openeclass: from 3.11, before 3.13 (fixed in 3.13)

Published 2026-03-16. Last modified 2026-06-17.