CVE-2022-44543: IN2CODE Femanager

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.

Affected products

• IN2CODE Femanager: before 5.5.2 (fixed in 5.5.2); from 6.0.0, before 6.3.3 (fixed in 6.3.3); version 7.0.0 only

Published 2023-12-12. Last modified 2026-06-17.