Security issues in third-party TYPO3 extensions

Security vulnerabilities have been discovered in third-party TYPO3 extensions: css_filelinks, terminal, beuserswitch, rtg_files, irfaq, skt_eurocalc, jftcaforms, bc_post2facebook, aeurltool,…

Security issues in third-party TYPO3 extensions

For further information on all CSB (Collective Security Bulletin) issues, please read the related advisory TYPO3-SA-2010-018 that was published today:…

Security issues in third-party TYPO3 extensions

For further information on all CSB (Collective Security Bulletin) issues, please read the related advisory TYPO3-SA-2010-015 that was published today:…

Security issues in two third party extensions

Several vulnerabilities have been discovered in the third party TYPO3 extensions Formhandler and Questionaire For further information on the issue in extension Formhandler, please read the related…

Security update: Formmail issue (security_formmail)

This extension fixes a problem with formmail elements. Works with TYPO3 3.6.x and 3.7.x. You will not need this patch on versions starting from 3.8.0.

Show extension details Download ZIP of version 1.0.0

See What's On: TYPO3 University Days 2021

We have put together a colorful digital program for our online meeting and have attracted some great speakers: We will be talking about Communication across borders and departments, Collaboration and…

Seeder (seeder)

Seeder is a TYPO3 Extension that generates fake data for your TYPO3 Extension. Its intended for developers only!!! This Version is an experimental version!

Show extension details Download ZIP of version 0.3.1 Extension documentation

Seek And You Shall Find—Global Documentation Search

A significant pain point for readers who come to the TYPO3 documentation , has been the challenge of finding what they’re looking for. A dedicated working group has implemented a new global search…

Select Pro (gst_selectpro)

Dynamically selects and displays a number of records according to free definable sql statements. Full output control including a link to the original content element. Comes with many predefined…

Show extension details Download ZIP of version 1.0.0 Extension documentation

Sellector.com Widget Integration (chsellector)

Integrates the JavaScript-based GUI widget by www.sellector.com into TYPO3. The widget provides a product configurator like selection service featuring checkboxes and sliders and delivering results in…

Show extension details Download ZIP of version 0.1.2 Extension documentation

Selling TYPO3—What Salespeople Told Us

Thank you to the respondents and thank you to my colleague, Liz Robau from Open Strategy Partners for helping to prepare the survey analysis. I’ll provide a summary of the results, and also show you…

Semantic Suggestion (semantic_suggestion)

TYPO3 extension for suggesting semantically related pages

Show extension details Download ZIP of version 2.0.1 Extension documentation

Semantic Template Engine Typo3 Extension (nr_semantic_templates)

Show extension details Download ZIP of version 0.3.0 Extension documentation

Semantic Web Integration (semantic)

This extension provides components to consume and expose data of/to the Linked Data cloud. See EXT:semantic/Documentation/en/Manual.txt or http://forge.typo3.org/projects/extension-semantic for more…

Show extension details Download ZIP of version 1.0.0

Semantic search (OpenAI + Pinecone) (amt_pinecone)

AMT_Pinecone is a TYPO3 extension that integrates semantic search capabilities into your website using OpenAI embedding models and the Pinecone vector database. Semantic search focuses on…

Show extension details Download ZIP of version 0.2.0 Extension documentation

Sensitive Data Exposure in extension "Job Fair" (jobfair)

Release Date: November 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job Fair" (jobfair) Vulnerability Type: Sensitive…

Sensitive Data Exposure in extension "Job Fair" (jobfair)

Release Date: May 12, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Job Fair (ext:jobfair) Vulnerability Type: Sensitive Data…

Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

Release Date: November 17, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: View frontend statistics (view_statistics)…

Sensitive Information Disclosure

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: July 28, 2020 Vulnerability Type: Sensitive Information Disclosure Affected Versions: 9.0.0-9.5.19,…

Sensitive Information Disclosure in extension "Media Content Element" (mediace)

Release Date: July 28, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Media Content Element (mediace) Vulnerability Type:…

Sensitive Information Disclosure in “Extbase Yaml Routes” (routes)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: “Extbase Yaml Routes” (routes) Vulnerability Type:…

Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration

Component Type: TYPO3 CMS Subcomponent: Site Configuration, YAML File Loader (ext:core) Release Date: December 13, 2022 Vulnerability Type: Sensitive Information Disclosure Affected Versions:…

Sensitive links in search results of TYPO3 extension indexed_search

Component Type: TYPO3 CMS Subcomponent: Indexed Search (ext:indexed_search) Release Date: July 20, 2021 Impact: Information Disclosure Type: Advisory Problem Description On TYPO3 websites where the…

Sentry Client (sentry_client)

A Sentry client for TYPO3. It forwards errors and exceptions to Sentry - https://sentry.io/

Show extension details Download ZIP of version 4.2.0 Extension documentation

Sentry Client for TYPO3 (typo3_sentry_client)

Use Sentry to track errors in your TYPO3-installation

Show extension details Download ZIP of version 1.6.0