Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF

CVE-2024-9711 First seen on SecPulse
Original description The description as published by the source.

The EKC Tournament Manager WordPress plugin before 2.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details