3 results · Clear filters · Feed
-
Medium 5.4
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticat…
-
Medium 5.4
Broken Access Control in extension "femanager"
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various fr…
-
Medium 4.2
TYPO3 extension femanager Broken Access Control vulnerability
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.