CVE-2024-31027

16th percentile - higher than 16% of all known CVEs

Cross Site Scripting vulnerability in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality.

An attacker can inject malicious script that executes in the victim's browser, potentially leading to session theft, account takeover, or malware distribution.

Update Open eClass Platform to a patched version or apply proper input filtering and validation in the registration functionality.