Privilege Escalation to System Maintainer

Component Type: TYPO3 CMS Subcomponent: DataHandler (ext:core) Release Date: May 20, 2025 Vulnerability Type: Broken Authentication Affected Versions: 10.4.0-10.4.49, 11.0.0-11.5.43, 12.0.0-12.4.30,…

TYPO3 13.4.12 and 12.4.31 security releases published

The following TYPO3 updates have been released: TYPO3 13.4.12 LTS TYPO3 12.4.31 LTS All versions are security releases and contain important security fixes - read the corresponding security advisories…

TYPO3 Trademark Usage: What’s Allowed and What’s Not

The TYPO3 name is more than a label — it represents a global open-source community, a rock-solid CMS, and decades of shared innovation. As the TYPO3 ecosystem continues to grow, we want to make sure…

Insecure Direct Object Reference in extension "Download manager" (reint_downloadmanager)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Download manager" (reint_downloadmanager) Composer Package…

Cross-Site Scripting in extension "[clickstorm] SEO" (cs_seo)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "[clickstorm] SEO" (cs_seo) Composer Package Name:…

Insecure Direct Object Reference in extension "femanager" (femanager)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "femanager" (femanager) Composer Package Name:…

Multiple vulnerabilities in extension "Backup Plus" (ns_backup)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Backup Plus" (ns_backup) Composer Package Name:…

Multiple vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Front End User Registration" (sr_feuser_register) Composer…

Using TYPO3 for Small Projects Pt.1

Winning Votes With TYPO3: A Guide to Content Management for Political Parties

Report From the Best Practices Remote Day April 2025

About the Best Practices Team The team currently provides the Tea example (tea) extension , which serves as an example on how to write an Extbase extension following best practices. The main focus is…

TYPO3 9.5.52, 10.4.51, and 11.5.45 ELTS Released

TYPO3 13.4.13 and 12.4.32 maintenance releases published

The following TYPO3 updates have been released: TYPO3 13.4.13 LTS TYPO3 12.4.32 LTS Both versions are maintenance releases only. These releases aim to address regressions in the previous v13.4.12 and…

Seamless Deployment — Enhancing TYPO3 Documentation for a Smooth Transition From Local to Live

Project Goal The deployment process in TYPO3 projects can vary greatly depending on the setup. Composer-based installations, CI/CD pipelines, version control, and deployment using tools like Deployer…

May 2025: Developer Appreciation Day (DAD)

Budget 2025 Ideas for Quarter 3/2025 Published — Vote Now!

In 2024, the Business Control Committee (BCC) launched the community budget process with quarterly calls for budget ideas. The ideas for Quarter 3/2025 are now published at talk.typo3.org, where you…

TYPO3 v14 Release Schedule: A Smarter Way Forward

The release cycle for TYPO3 v14 is set — and with it, a new chapter in how we build TYPO3 together. While previous versions were shaped by a fast-paced, multi-sprint cycle, the path for v14 reflects a…

This Month in TYPO3: May 2025 [Issue #25]

May delivered a security sprint — four core releases and two ELTS waves — alongside budget-funded playground tooling, Q3 idea voting, and a calendar packed with conferences, camps, and global…

At the Helm: TYPO3 President Leads the Open Website Alliance

The Open Website Alliance represents the content management systems (CMS) behind roughly 50% of all websites online today. The Open Website Alliance was co-founded by the Drupal Association , Open…

Using TYPO3 for Small Projects Pt. 2 - Content & Templates

TYPO3 13.4.14 and 12.4.33 maintenance releases published

The following TYPO3 updates have been released: TYPO3 13.4.14 LTS TYPO3 12.4.33 LTS Both versions are maintenance releases only. Further upgrade instructions No further database upgrades are required…

Using TYPO3 for Small Projects Pt. 3 - Blog Extension

Show Us What You've Got: Best TYPO3 Extension of 2025 — Call for Submissions!

TYPO3 thrives on the creativity and dedication of its community. Extensions are a core part of what makes TYPO3 powerful, flexible, and fun to work with. From clever backend helpers to groundbreaking…

An Update on the TYPO3’s GitLab Project Template

Check Out the GitLab Project Template for TYPO3 Automated Setup The setup is now completely automated. The required DDEV add-ons are installed automatically along with the Composer and npm packages.…

Members Have Selected Five Ideas to be Funded in Quarter 3/2025

On 29 April 2025, we launched the community budget process for Q3/2025 . The TYPO3 Association members were asked to vote on their favorites . As a result of 163 votes, the TYPO3 Association has…