- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 13 · 5 high, 5 medium
- Registry
- Packagist
Advisories 13
- CVE-2023-50459Medium 5.4
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3.
Affected: from 7.0.0, fixed in 7.2.3.
- CVE-2023-45023Medium 4.2
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation…
Affected: from 7.0.0, fixed in 7.2.2.
- CVE-2026-77133Medium 6.0
Broken Access Control in extension "femanager" (femanager)
Affected: from 13.0.0, fixed in 13.3.5; from 8.0.0, fixed in 8.4.2; from 7.0.0, fixed in 7.5.5; fixed in 6.4.5.
- CVE-2026-77134High 8.3
Broken Access Control in extension "femanager" (femanager)
Affected: from 13.0.0, fixed in 13.3.5; from 8.0.0, fixed in 8.4.2; from 7.0.0, fixed in 7.5.5; fixed in 6.4.5.
- CVE-2026-77135High 8.2
Information Disclosure in extension "femanager" (femanager)
Affected: from 13.0.0, fixed in 13.3.5; from 8.0.0, fixed in 8.4.2; from 7.0.0, fixed in 7.5.5; fixed in 6.4.5.
- CVE-2026-77146High 8.3
Broken Access Control in extension "femanager" (femanager)
Affected: from 8.0.0, fixed in 8.4.2.
- CVE-2025-7900Medium 5.3
Insecure Direct Object Reference in extension "femanager" (femanager)
Affected: from 8.0.0, through 8.3.0; from 7.0.0, through 7.5.2; through 6.4.1; fixed in 6.4.2; from 7.0.0, fixed in 7.5.3; from 8.0.0, fixed in 8.3.1.
- CVE-2025-48202Medium 5.3
The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.
Affected: from 8.0.0, fixed in 8.2.2; from 7.0.0, fixed in 7.4.2; from 6.0.0, fixed in 6.4.1; from 5.5.0, fixed in 5.5.5.
- CVE-2022-44543Unrated
The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted…
Affected: from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.3.3; fixed in 5.5.2.
- CVE-2023-25014High 8.6
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3.
Affected: fixed in 5.5.3; from 6.0.0, fixed in 6.3.4; from 7.0.0, fixed in 7.1.0.
- CVE-2023-25013High 8.6
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3.
Affected: fixed in 5.5.3; from 6.0.0, fixed in 6.3.4; from 7.0.0, fixed in 7.1.0.
- CVE-2021-36787Unrated
The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
Affected: fixed in 5.5.1; from 6.0.0, fixed in 6.3.1.
- CVE-2014-6292Unrated
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via…
Affected: fixed in 1.0.9.