Tourism Management System is a website building system for tourism management. v3.2 of Tourism Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to change any user profile details, such as username, phone number, etc.