CVE-2022-44543

—

CVSS 3.1

5.3 medium

EPSS

<1%p47

Published

Dec 12, 2023 (Dec 12, 2023)

Modified

Jun 17, 2026

Description

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.

Vendors: in2code
Products: femanager
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.