CVE-2026-24665: The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2,

Open eClass, a course management system (software that helps teachers organize classes and assignments), had a stored XSS vulnerability (a security flaw where attackers inject harmful code that runs when other users view it) in versions before 4.2. Authenticated students could inject malicious JavaScript (code that runs in web browsers) into assignment files, and this code would execute when instructors viewed the submissions.