Description

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0

Remediation

References

CVE-2025-7900

Related Vulnerabilities

IBM RTC Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1753)

Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33160)

WordPress Plugin Zotpress 'zotpress.rss.php' SQL Injection (4.4)

Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-13671)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-2428)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-639 CVE-2025-7900