CVE-2026-2997 — WisdomGarden｜Tronclass - Insecure Direct Object Reference
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parame…
Published: 2026-02-23 · CVSS: 6.5 · CVSS 4.0
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7