T3CON 2023: Connect, Collaborate, and Celebrate at the TYPO3 Conference

Being TYPO3 at Everything Open in Melbourne

Mathias Bolt Lesniak attended Everything Open in Melbourne, Australia , 14–16 March 2023, as part of the Meet TYPO3 initiative. It is a grassroots conference with a focus on open technologies, the…

Code the TYPO3 Core in 2023

In March 2019, we introduced a revised core development structure, consisting of four groups for coordinating TYPO3 Core development: Core Initiatives Component Mergers Framework Mergers Product Team…

TYPO3 12.4.1 and 11.5.27 maintenance releases published

The following TYPO3 updates have been released: TYPO3 12.4.1 LTS TYPO3 11.5.27 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for these…

Update on the TYPO3 Content Blocks and Leadership Changes

The Structured Content Initiative is the Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been working…

Report From a Two-Day Code Sprint at the TYPO3 Offices in Düsseldorf, Germany

First Impressions and Introductions I arrived in Düsseldorf and drove across the river to the TYPO3 office building. I took the lift to the 2nd floor and stood outside the reception looking at the…

TYPO3 12.4.2 and 11.5.28 maintenance releases published

The following TYPO3 updates have been released: TYPO3 12.4.2 LTS TYPO3 11.5.28 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for these…

Cross-Site Scripting in extension "Faceted Search" (ke_search)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Faceted Search" (ke_search) Composer Package Name:…

SQL Injection in extension "ipandlanguageredirect" (ipandlanguageredirect)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "ipandlanguageredirect" (ipandlanguageredirect) Composer…

Multiple vulnerabilities in extension "Canto Extension" (canto_extension)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Canto Extension" (canto_extension) Composer Package Name:…

Announcement of Core Mergers 2023

In April 2023, we announced the call for Core Mergers . Today, I'm proud to welcome new and familiar faces to the team! Component Mergers Component mergers have a clear vision for one specific topic,…

T3CON23: Call for TYPO3 Award Submissions!

There are 13 different categories in which you can nominate your project in to win one of the official TYPO3 Awards. Submission Period for TYPO3 Awards Gala at T3CON23 Opens June 20th, 2023. Get ready…

Keynote Speaker Announcement for T3CON23: Nicholas Janni to Deliver Keynote Address at the TYPO3 Conference 2023

The TYPO3 Project is excited to announce Nicholas Janni as the keynote speaker for the 15th TYPO3 Conference 2023 (T3CON23). The expert on transformational leadership has titled his keynote address…

TYPO3 12.4.3 and 11.5.29 maintenance releases published

The following TYPO3 updates have been released: TYPO3 12.4.3 LTS TYPO3 11.5.29 LTS Both versions are maintenance releases only. Further upgrade instructions TYPO3 projects running with indexed search…

Inside TYPO3 – July 2023

Server Team Status Report — July 2023

Single Sign-On Years ago, we introduced LDAP into the TYPO3 universe and migrated all typo3.org frontend user accounts to LDAP accounts. Since then, we have connected more and more applications to…

TYPO3 12.4.4 and 11.5.30 security releases published

The following TYPO3 updates have been released: TYPO3 12.4.4 LTS TYPO3 11.5.30 LTS All versions are security releases and contain important security fixes - read the corresponding security advisories…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: July 25, 2023 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.7.42-8.7.52,…

Information Disclosure due to Out-of-scope Site Resolution

Component Type: TYPO3 CMS Subcomponent: URL Routing (ext:core) Release Date: July 25, 2023 Vulnerability Type: Information Disclosure Affected Versions: 9.4.0-9.5.41, 10.0.0-10.4.38, 11.0.0-11.5.29,…

Cross-Site Scripting in CKEditor4 WordCount Plugin

Component Type: TYPO3 CMS Subcomponent: Rich Text Editor CKEditor4 (ext:rte_ckeditor) Release Date: July 25, 2023 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.5.0-9.5.41,…

TYPO3 and Fellow CMS Projects Warn of Adverse Effects of EU Legislation

Invitation to a Cross-Community Meeting

Cooperation, Connections and Coffee — a TYPO3 Education Committee Community Sprint Report

Combine that with the spacious premises and available equipment in the TYPO3 GmbH and you have a top working environment. Also, there were donuts. Lots of donuts. (Thanks to Boris Hinzer from…

GitLab’s Built-In TYPO3 Project Template

Using the new template is easy: Just create a new project and select Create from template . GitLab will show a list of available templates. Locate the TYPO3 Distribution and hit the Use Template…

IONOS Becomes Patron Sponsor of the 15th TYPO3 Conference 2023