5.4 Medium

CVE-2023-23974 Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager plugin <= 9.7.4 affecting all registration actions (delete, delete all, edit, update).

Affected products and versions

Product	Affected versions	Fixed in
Quick Event Manager 9.7	earliest → 9.7.4	No fix stated

The 4 CVEs of Quick Event Manager →

CVE-2023-23975 Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access… 5.3 Medium CVE-2023-23979 Unauth 7.1 High CVE-2022-46863 Auth 5.9 Medium

Do you use Quick Event Manager?

Track this CVE Watch Quick Event Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2023-23974

Timeline

Published March 1, 2023
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2023-23974 Cross-Site Request Forgery (CSRF) vulnerability in Fullworks Quick Event Manager…

Description

Affected products and versions

Other CVEs of Quick Event Manager