diff --git a/tournaments/views.py b/tournaments/views.py
index 7505abf..fd7759b 100644
--- a/tournaments/views.py
+++ b/tournaments/views.py
@@ -66,6 +66,7 @@ from .forms import CustomPasswordChangeForm
 from .services.email_service import TournamentEmailService
 from .services.tournament_registration import RegistrationCartManager
 from .services.payment_service import PaymentService
+from django.views.decorators.csrf import csrf_exempt
 
 def index(request):
     now = timezone.now()
@@ -1520,6 +1521,7 @@ def confirm_call(request, tournament_id):
 
     return redirect('tournament-info', tournament_id=tournament_id)
 
+@csrf_exempt
 def xls_to_csv(request):
     # Check if the request has a file
     if 'file' in request.FILES: