Cpe:2.3:a:tduck:tduck_survey_form:*:*:*:*:*:*:*:*

TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form submissions by supplying arbitrary submission identifiers.