CVE-2021-44266: Improper Neutralization of Input During Web Page Generation

GUnet Open eClass aka openeclass before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter...