femanager Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/femanager/ Thu, 23 Feb 2023 14:10:45 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png femanager Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/femanager/ 32 32 CVE-2021-36787 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36787/ Thu, 23 Feb 2023 14:10:45 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36787/ The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

The post CVE-2021-36787 appeared first on CVE Vulnerability.

]]> The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

The post CVE-2021-36787 appeared first on CVE Vulnerability.

]]> CVE-2023-25013 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25013/ Wed, 22 Feb 2023 14:02:30 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25013 An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.

The post CVE-2023-25013 appeared first on CVE Vulnerability.

]]> An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.

The post CVE-2023-25013 appeared first on CVE Vulnerability.

]]> CVE-2023-25014 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25014/ Wed, 22 Feb 2023 14:02:30 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25014 An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.

The post CVE-2023-25014 appeared first on CVE Vulnerability.

]]> An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.

The post CVE-2023-25014 appeared first on CVE Vulnerability.

]]>