← Database

CVE-2023-23974

MEDIUM CVSS: 4.3 Published: 2023-03-01 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update).

Affected Platforms

Fullworksplugins Quick Event Manager

Weakness Type

CWE-352, CWE-352

References