CVE-2025-48202: TYPO3 Femanager Extension

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.

Affected products

• TYPO3 Femanager Extension: from 5.5.0, before 5.5.5 (fixed in 5.5.5); from 6.0.0, before 6.4.1 (fixed in 6.4.1); from 7.0.0, before 7.4.2 (fixed in 7.4.2); from 8.0.0, before 8.2.2 (fixed in 8.2.2)

Published 2025-05-21. Last modified 2026-06-17.