WisdomGarden Tronclass vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting WisdomGarden Tronclass: 4 record(s), with affected versions and fixes.
CVE-2026-110467
Medium · 4.3
CWE-639 Oct 14, 2026
WisdomGarden｜Tronclass - Insecure Direct Object Reference
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
CVE-2026-110466
Medium · 4.3
CWE-497 Oct 14, 2026
WisdomGarden｜Tronclass - Sensitive Data Exposure
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
CVE-2026-110465
Medium · 4.3
CWE-639 Oct 14, 2026
WisdomGarden｜Tronclass - Insecure Direct Object Reference
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
CVE-2026-2997
Medium · 5.4
CWE-639 Feb 23, 2026
WisdomGarden｜Tronclass - Insecure Direct Object Reference
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.