Typo3 · Femanager · CVE-2025-7900
**Name of the Vulnerable Software and Affected Versions**
femanager versions 6.4.1 and below
femanager versions 7.0.0 through 7.5.2
femanager versions 8.0.0 through 8.3.0
**Description**
The femanager extension for TYPO3 contains an Insecure Direct Object Reference issue, which allows unauthorized modification of `userdata`.
**Recommendations**
Update femanager to a version later than 6.4.1.
Update femanager to a version later than 7.5.2.
Update femanager to a version later than 8.3.0.