TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)

PKSA-ys21-4vkn-ktz8 CVE-2026-77133

Affected version: >=13.0.0,<13.3.5|>=8.0.0,<8.4.2|>=7.0.0,<7.5.5|<6.4.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)

PKSA-2nc4-qstv-j2k4 CVE-2026-77134

Affected version: >=13.0.0,<13.3.5|>=8.0.0,<8.4.2|>=7.0.0,<7.5.5|<6.4.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-024: Information Disclosure in extension "femanager" (femanager)

PKSA-8rwj-778x-wr3q CVE-2026-77135

Affected version: >=13.0.0,<13.3.5|>=8.0.0,<8.4.2|>=7.0.0,<7.5.5|<6.4.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)

PKSA-d8yc-sp4m-wsqx CVE-2026-77146

Affected version: >=8.0.0,<8.4.2

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Femanager extension for TYPO3 allows Insecure Direct Object Reference

PKSA-nbcd-j79h-9hxy CVE-2025-7900 GHSA-rc5f-3hfv-jxp2

Affected version: >=8.0.0,<8.3.1|>=7.0.0,<7.5.3|<6.4.2

Reported by:
GitHub

[MEDIUM] TYPO3-EXT-SA-2025-006: Insecure Direct Object Reference in extension "femanager" (femanager)

PKSA-p2c4-qwpc-3xvm CVE-2025-48202 GHSA-xxwr-wv9g-7jw3

Affected version: >=8.0.0,<8.2.2|>=7.0.0,<7.4.2|>=6.0.0,<6.4.1|>=5.5.0,<5.5.5

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2023-010: Broken Access Control in extension "femanager" (femanager)

PKSA-89pk-j3wv-wwvx CVE-2023-50459 GHSA-4xp5-hr35-84cx

Affected version: >=7.0.0,<7.2.3

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2023-008: Broken Access Control in extension "femanager" (femanager)

PKSA-tr1z-296c-srmw CVE-2023-45023 GHSA-93j4-v838-8767

Affected version: >=7.0.0,<7.2.2

Reported by:
GitHub, FriendsOfPHP/security-advisories

[HIGH] Broken Access Control in 3rd party TYPO3 extension "femanager"

PKSA-kwq2-dwj1-bw4q CVE-2023-25014 GHSA-3p9x-xxx6-2w4p

Affected version: >=7.0.0,<7.1.0|>=6.0.0,<6.3.4|<5.5.3

Reported by:
GitHub

[HIGH] TYPO3-EXT-SA-2023-001: Broken Access Control in extension "femanager" (femanager)

PKSA-dn7d-jkj5-2mww CVE-2023-25013 GHSA-mm8v-wmqx-8h2j

Affected version: >=7.0.0,<7.1.0|>=6.0.0,<6.3.4|<5.5.3

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2022-015: Broken Access Control in extension "femanager" (femanager)

PKSA-m9m3-bjxq-59sy CVE-2022-44543 GHSA-59m9-p6cm-94q5

Affected version: >=7.0.0,<7.0.1|>=6.0.0,<6.3.3|<5.5.2

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users

PKSA-n521-7nb4-jwd2 CVE-2014-6292 GHSA-377v-8637-6vq6

Affected version: <1.0.9

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in the femanager TYPO3 extension

PKSA-fs9w-z9zg-zbjw CVE-2021-36787 GHSA-f3rf-v9qm-9c89

Affected version: >=6.0.0,<6.3.1|<5.5.1

Reported by:
GitHub