Lucene search
HistoryJun 13, 2024 - 11:15 p.m.
CVE-2024-33253
vulnerability
cross-site scripting
gunet openeclass
e-learning platform
authenticated privilege
arbitrary code
badge template editing
cve-2024-33253
0.0004 Low
EPSS
Percentile
9.1%
Cross-site scripting (XSS) vulnerability in GUnet OpenEclass E-learning Platform version 3.15 and before allows a authenticated privileged attacker to execute arbitrary code via the title and description fields of the badge template editing function.
