CVE-2026-110467 [MEDIUM] – Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability.

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.