CVE-2024-31027: Greek Universities Network (GUnet) Open eClass Platform vulnerability
Published Sep 29, 2026
·Updated
Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality.
Affected Software
1 affected component
Greek Universities Network (GUnet) Open eClass Platform=3.15
Event History
Sep 29, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:17 PM
Description
Frequently Asked Questions
1
Which inputs should be treated as untrusted when reviewing or mitigating this issue?
The affected registration inputs are the last name, first name, and username parameters. These values should be handled as untrusted wherever they are stored or later displayed.
2
What level of access does an attacker need to attempt exploitation?
The issue is described as remotely exploitable through the user registration functionality. The provided information does not state that prior authentication or elevated privileges are required.