Skip to content
Unrated

EKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRF

CVE-2024-9709 First seen on SecPulse
Original description The description as published by the source.

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details