CVE-2023-23974

Name of the Vulnerable Software and Affected Versions Fullworks Quick Event Manager plugin versions <= 9.7.4

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability affecting all registration actions, including delete, delete all, edit, and update.

Recommendations For versions <= 9.7.4, update to a version higher than 9.7.4 to resolve the issue. As a temporary workaround, consider restricting access to the registration actions to minimize the risk of exploitation.