Description
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
Remediation
References
Related Vulnerabilities
WordPress Plugin Role Scoper Cross-Site Scripting (1.3.64)
WordPress Plugin Image Slider Arbitrary File Deletion (1.1.89)
WordPress Plugin Easy Banners Cross-Site Scripting (1.4)
WordPress Plugin 360 Product Rotation Arbitrary File Upload (1.2.4)
WordPress Plugin MailChimp for WooCommerce Local File Inclusion (2.1.1)