Input validation vulnerability in SIS Handball 1.0.45

The SIS Handball plugin for WordPress is vulnerable to a security vulnerability, which affects versions up to and including 1.0.45. This vulnerability can be exploited when someone is able to trick a site administrator into performing an action, such as clicking on a link. It is caused by a missing nonce validation on the page_options() function, which allows unauthenticated attackers to update the plugin’s settings via a forged request.