CVE-2026-24672 | Openeclass Open eClass up to 4.1 User Profile cross site scripting

A vulnerability was found in Openeclass Open eClass up to 4.1. It has been rated as problematic. Affected is an unknown function of the component User Profile Handler. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-24672. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.