Report From the EU Open Source Policy Summit

After sending our joint letter to the European Union concerning the Cyber Resilience Act (CRA), TYPO3 and our free and open source CMS friends benefitted from the work of OpenForum Europe . The tenth…

Report From the EMPAMOS Barcamp and Networking Event in Nuremberg 2023

EMPAMOS stands for the empirical analysis of motivational game elements (EMPirische Analyse MOtivierender Spielelemente); it is a research project at the tech-university of Nuremberg looking at the…

Report From the Best Practices Team (2023)

Closing Out 2023 Towards the end of 2023, we held our first two remote sprints. Find out what it was like from a newcomer’s point of view in this blog post by Karsten Nowak: A Recap of the First…

Report From the Best Practices Remote Day July 2025

Here’s a quick recap of what happened — and why these sprints are always worth showing up for. A new month, a new Monday. So it's time again for the Remote Code Sprint, which has become a regular…

Report From the Best Practices Remote Day April 2025

About the Best Practices Team The team currently provides the Tea example (tea) extension , which serves as an example on how to write an Extbase extension following best practices. The main focus is…

Report From the 2018 Marketing Sprint

We created new materials to help decision makers—and those who sell to or need to inform them—understand what makes TYPO3 CMS so brilliant in terms relevant to them. Check out the new pages! This…

Report From a Week of TYPO3 in Papua New Guinea

TYPO3 Community Expansion Committee lead Daniel Homorodean from Arxia (Romania), TYPO3 Association Board member Mathias Bolt Lesniak from toujou (Norway/New Zealand), and Stevo O’Rourke from Ocular…

Report From a Two-Day Code Sprint at the TYPO3 Offices in Düsseldorf, Germany

First Impressions and Introductions I arrived in Düsseldorf and drove across the river to the TYPO3 office building. I took the lift to the 2nd floor and stood outside the reception looking at the…

Report From a Three-Day Code Sprint By an Application Development Apprentice

Arrival at the TYPO3 Office When I got to the TYPO3 GmbH office in the morning, loads of TYPO3 developers welcomed me. People like Lina Wolf, Chris Müller, and Garvin Hicking were there, part of the…

Report From The Content Types Team

Following this, a self-organized codesprint event in Düsseldorf focused on extending the GUI for EXT:content_blocks , resulting in a comprehensive first draft. We have also welcomed two new members,…

Repeatable form elements (repeatable_form_elements)

Adds a new form element which allows the editor to create new container elements with any type fields in them. In the frontend, a user can create any number of new containers. This is an extension for…

Show extension details Download ZIP of version 5.0.0 Extension documentation

Rename Form-Field-Label via PageTS (maja_labelrename)

Adds the support for renaming/overriding the field-label via TCEFORM in PageTS. The function is implemented since Typo3 4.2alpha3.

Show extension details Download ZIP of version 0.2.0 Extension documentation

Removal of Community Extensions From forge.typo3.org

In the past, Forge was a place where a community extension could host its issues, news, internal documents, and a wiki. It was also a place for project planning, like tracking progress and spent time.…

Remote Server (remote_server)

Enable TYPO3 to act as a remote application server for web services calls. BE access restrictions apply. Not maintained anymore.

Show extension details Download ZIP of version 0.2.1 Extension documentation

Remote File Disclosure and Cross-Site Scripting vulnerability in extensions pmkshadowbox and pmkslimbox

Release Date: Oktober 20, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Extension: pmkshadowbox Affected Versions: Version 3.2.0 and all…

Remote Day Each Month for The Best Practices Team

If you are a newcomer to TYPO3 development, come along to gain insights into teamwork, GitHub, bug resolution, and automated testing. When The remote day will take place on every first monday…

Remote Content Sharing (wq_content_sharing)

Shared any approved Content between many Typo3 Websites

Show extension details Download ZIP of version 0.1.7

Remote Command Execution and Remote File Disclosure vulnerability in extension pdf_generator2

Release Date: Oktober 20, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.21.0 and all versions below…

Remote Command Execution

Component Type: System Extension (TYPO3 Versions 4.0-4.0.3, 4.1beta) Third Party Extension (TYPO3 Versions up to 3.8.1). Since TYPO3 Version 4.0 the extension is part of the TYPO3 default installation…

Remote Code Execution in third party library swiftmailer

Component Type: TYPO3 CMS Release Date: January 3, 2017 Vulnerability Type: Remote Code Execution Affected Versions: 6.2.0 to 6.2.29, 7.6.0 to 7.6.14 and 8.0.0 to 8.5.0 Severity: Low Suggested CVSS…

Remote Code Execution in extension "freeCap CAPTCHA" (sr_freecap)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution Affected Versions: 2.4.5…

Remote Code Execution in extension "Turn!" (turn)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Turn! (turn) Vulnerability Type: Remote Code Execution…

Remote Code Execution in extension "PHPUnit" (phpunit)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution Affected Versions: 6.5.14…

Remote Code Execution in extension "PHPMailer" (bb_phpmailer)

Release Date: May xx, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.73.1 and below Vulnerability Type: Remote…

Remote Code Execution in extension "Maag Sendmail" (maag_sendmail)

Release Date: May xx, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.0.0 and below Vulnerability Type: Remote…