Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/in2code/femanager@8.0.1
purl pkg:composer/in2code/femanager@8.0.1
Next non-vulnerable version 8.3.1
Latest non-vulnerable version 8.3.1
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-vpgv-cr97-kffs
Aliases:
CVE-2025-7900
GHSA-rc5f-3hfv-jxp2
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
8.3.1
Affected by 0 other vulnerabilities.
VCID-wumy-ggkp-cugg
Aliases:
CVE-2025-48202
GHSA-xxwr-wv9g-7jw3
The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.
8.2.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T20:07:41.970710+00:00 GitLab Importer Affected by VCID-vpgv-cr97-kffs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/in2code/femanager/CVE-2025-7900.yml 38.6.0
2026-06-12T20:02:09.700659+00:00 GitLab Importer Affected by VCID-wumy-ggkp-cugg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/in2code/femanager/CVE-2025-48202.yml 38.6.0