Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/in2code/femanager@7.4.2
purl pkg:composer/in2code/femanager@7.4.2
Next non-vulnerable version 7.5.3
Latest non-vulnerable version 8.3.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vpgv-cr97-kffs
Aliases:
CVE-2025-7900
GHSA-rc5f-3hfv-jxp2
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
7.5.3
Affected by 0 other vulnerabilities.
8.3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-wumy-ggkp-cugg The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference. CVE-2025-48202
GHSA-xxwr-wv9g-7jw3

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-15T01:55:31.315109+00:00 GHSA Importer Fixing VCID-wumy-ggkp-cugg https://github.com/advisories/GHSA-xxwr-wv9g-7jw3 38.6.0
2026-06-12T20:07:41.946911+00:00 GitLab Importer Affected by VCID-vpgv-cr97-kffs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/in2code/femanager/CVE-2025-7900.yml 38.6.0
2026-06-12T20:02:09.677269+00:00 GitLab Importer Fixing VCID-wumy-ggkp-cugg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/in2code/femanager/CVE-2025-48202.yml 38.6.0
2026-06-12T07:55:37.819985+00:00 GithubOSV Importer Fixing VCID-wumy-ggkp-cugg https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-xxwr-wv9g-7jw3/GHSA-xxwr-wv9g-7jw3.json 38.6.0