# in2code/femanager (Packagist) vulnerabilities 13 known vulnerabilities (5 high, 5 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://packagist.org/packages/in2code/femanager ## Advisories (13) ### [CVE-2023-50459](https://cve.now/CVE-2023-50459): An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. - Severity: Medium 5.4 - Published: Sep 14, 2026 - Affected: from 7.0.0, fixed in 7.2.3. ### [CVE-2023-45023](https://cve.now/CVE-2023-45023): The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation… - Severity: Medium 4.2 - Published: Sep 14, 2026 - Affected: from 7.0.0, fixed in 7.2.2. ### [CVE-2026-77133](https://cve.now/CVE-2026-77133): Broken Access Control in extension "femanager" (femanager) - Severity: Medium 6.0 - Published: Aug 25, 2026 - Affected: from 13.0.0, fixed in 13.3.5; from 8.0.0, fixed in 8.4.2; from 7.0.0, fixed in 7.5.5; fixed in 6.4.5. ### [CVE-2026-77134](https://cve.now/CVE-2026-77134): Broken Access Control in extension "femanager" (femanager) - Severity: High 8.3 - Published: Aug 25, 2026 - Affected: from 13.0.0, fixed in 13.3.5; from 8.0.0, fixed in 8.4.2; from 7.0.0, fixed in 7.5.5; fixed in 6.4.5. ### [CVE-2026-77135](https://cve.now/CVE-2026-77135): Information Disclosure in extension "femanager" (femanager) - Severity: High 8.2 - Published: Aug 25, 2026 - Affected: from 13.0.0, fixed in 13.3.5; from 8.0.0, fixed in 8.4.2; from 7.0.0, fixed in 7.5.5; fixed in 6.4.5. ### [CVE-2026-77146](https://cve.now/CVE-2026-77146): Broken Access Control in extension "femanager" (femanager) - Severity: High 8.3 - Published: Aug 25, 2026 - Affected: from 8.0.0, fixed in 8.4.2. ### [CVE-2025-7900](https://cve.now/CVE-2025-7900): Insecure Direct Object Reference in extension "femanager" (femanager) - Severity: Medium 5.3 - Published: Jul 22, 2025 - Affected: from 8.0.0, through 8.3.0; from 7.0.0, through 7.5.2; through 6.4.1; fixed in 6.4.2; from 7.0.0, fixed in 7.5.3; from 8.0.0, fixed in 8.3.1. ### [CVE-2025-48202](https://cve.now/CVE-2025-48202): The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference. - Severity: Medium 5.3 - Published: May 21, 2025 - Affected: from 8.0.0, fixed in 8.2.2; from 7.0.0, fixed in 7.4.2; from 6.0.0, fixed in 6.4.1; from 5.5.0, fixed in 5.5.5. ### [CVE-2022-44543](https://cve.now/CVE-2022-44543): The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted… - Severity: Unrated - Published: Dec 12, 2023 - Affected: from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.3.3; fixed in 5.5.2. ### [CVE-2023-25014](https://cve.now/CVE-2023-25014): An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. - Severity: High 8.6 - Published: Feb 2, 2023 - Affected: fixed in 5.5.3; from 6.0.0, fixed in 6.3.4; from 7.0.0, fixed in 7.1.0. ### [CVE-2023-25013](https://cve.now/CVE-2023-25013): An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. - Severity: High 8.6 - Published: Feb 2, 2023 - Affected: fixed in 5.5.3; from 6.0.0, fixed in 6.3.4; from 7.0.0, fixed in 7.1.0. ### [CVE-2021-36787](https://cve.now/CVE-2021-36787): The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document. - Severity: Unrated - Published: Aug 13, 2021 - Affected: fixed in 5.5.1; from 6.0.0, fixed in 6.3.1. ### [CVE-2014-6292](https://cve.now/CVE-2014-6292): The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via… - Severity: Unrated - Published: Oct 3, 2014 - Affected: fixed in 1.0.9. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/packagist/in2code/femanager Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.