[MEDIUM] Femanager extension for TYPO3 allows Insecure Direct Object Reference

PKSA-nbcd-j79h-9hxy CVE-2025-7900 GHSA-rc5f-3hfv-jxp2

Affected version: >=8.0.0,<8.3.1|>=7.0.0,<7.5.3|<6.4.2

Reported by:
GitHub

[HIGH] Broken Access Control in 3rd party TYPO3 extension "femanager"

PKSA-kwq2-dwj1-bw4q CVE-2023-25014 GHSA-3p9x-xxx6-2w4p

Affected version: >=7.0.0,<7.1.0|>=6.0.0,<6.3.4|<5.5.3

Reported by:
GitHub

[HIGH] TYPO3-EXT-SA-2023-001: Broken Access Control in extension "femanager" (femanager)

PKSA-dn7d-jkj5-2mww CVE-2023-25013 GHSA-mm8v-wmqx-8h2j

Affected version: >=7.0.0,<7.1.0|>=6.0.0,<6.3.4|<5.5.3

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2022-015: Broken Access Control in extension "femanager" (femanager)

PKSA-m9m3-bjxq-59sy CVE-2022-44543 GHSA-59m9-p6cm-94q5

Affected version: >=7.0.0,<7.0.1|>=6.0.0,<6.3.3|<5.5.2

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Cross-site Scripting in the femanager TYPO3 extension

PKSA-fs9w-z9zg-zbjw CVE-2021-36787 GHSA-f3rf-v9qm-9c89

Affected version: >=6.0.0,<6.3.1|<5.5.1

Reported by:
GitHub