The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.Referenceshttps://typo3.org/security/advisory/typo3-ext-sa-2023-008