Femanager (In2code) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 88 known versions, newest CVE from 2023-12-12. Vendor: In2code.

CVEs of Femanager

• CVE-2022-44543 - CVSS 5.3 (medium), 2023-12-12: The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a…
• CVE-2023-25013 - CVSS 8.6 (high), 2023-02-02: An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the…
• CVE-2023-25014 - CVSS 8.6 (high), 2023-02-02: An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the…
• CVE-2021-36787 - CVSS 5.4 (medium), 2021-08-13: The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
• CVE-2014-6292 - CVSS 6.4 (medium), 2014-10-03: The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.