Help to put a smile on people's face!

Moritz (called Mo by his friends) has done that and been there and his hat is living proof of that. However, it took TYPO3 to put that irresistible smile on his face. If you want to help putting a…

Remote Code Execution in extension "Turn!" (turn)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Turn! (turn) Vulnerability Type: Remote Code Execution…

TYPO3 8.7.11 and 7.6.25 released

Regression: Login Issues with Firefox There is a known login issue with Mozilla Firefox in the release packages mentioned further down that prevents login under some circumstances. To circumvent these…

Cross Site Scripting vulnerability in faq

Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: Version 0.0.7 and all versions below Vulnerability Type: Cross Site Scripting…

Multiple vulnerabilities in extension Statistics (ke_stats)

Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 0.1.2 and below Vulnerability Type: Cross Site Scripting, Blind SQL…

TypoScript by Example French (doc_core_tsbyex_fr)

Pour ceux qui veulent se plonger srieusement dans la cration de templates avec Typo3. Cest LA rfrence, qui vous apprendra programmer avec le TS. Pour "afficionados" seulement. Ce document vous est…

Show extension details Download ZIP of version 0.0.1 Extension documentation

TYPO3 CMS 4.5.35, 6.1.10 and 6.2.4 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 4.5.35 TYPO3 CMS 6.1.10 TYPO3 CMS 6.2.4 All versions are maintenance releases and contain bug fixes. For details about the…

Cross-Site Scripting in extension "Faceted Search" (ke_search)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Faceted Search (ke_search) Vulnerability Type: Cross-Site…

This Month in TYPO3 — May 2018 — Issue #1

Please bear with us if there are some topics in this article that are not directly associated with the last month's activities, but we thought they might be interesting anyway. Table of Contents TYPO3…

Improper error handling could lead to cache flooding in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.2.0 - 4.2.17, 4.3.0 - 4.3.13, 4.4.0 - 4.4.10 and 4.5.0 - 4.5.5 Release Date: September 14, 2011 Vulnerable subcomponent: Caching System Vulnerability…

TYPO3 CMS 4.5.24, 4.6.17, 4.7.9 and 6.0.3 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 4.5.24 TYPO3 CMS 4.6.17 TYPO3 CMS 4.7.9 TYPO3 CMS 6.0.3 All versions are maintenance releases and contain bug and security…

Cross-Site Scripting in extension "libconnect" (libconnect)

Release Date: November 20, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

Sensitive Information Disclosure in extension "Media Content Element" (mediace)

Release Date: July 28, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Media Content Element (mediace) Vulnerability Type:…

This Week in TYPO3 (2015, Week 3)

Week ending January 18 TYPO3 Neos In a technical discussion on Januari 26, to get a consensus of important (and possibly breaking) changes for the next versions, it was among others decided that…

Multiple vulnerabilities in extension "typo3_forum" (typo3_forum)

Release Date: January 22, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

Contact us

Contact Us! We highly appreciate your security awareness. If you learn about a potential security issue in the TYPO3 core or in an extension, please always contact the TYPO3 Security Team. If you discover a security problem in your own extension,…

Majordomo Plugin (rh_majordomo)

A Typo3 plugin that allows a FE user to add himself to a Majordomo email list.

Show extension details Download ZIP of version 1.2.1

LST iOS Reader (lst_iosreader)

iOS Reader App to sync and display content from typo3 on a iOS device.

Show extension details Download ZIP of version 0.0.1

Slideshow (cw_slideshow)

Add a very very very simple slideshow to your typo3 website. Slideshow uses jQuery. No config needed.

Show extension details Download ZIP of version 0.1.1 Extension documentation

DHBW SSO Service (dhbw_naw_sso)

Typo3 SSO Auth-Service for naw_single_signon. Use as FE/BE login-service adapter.

Show extension details Download ZIP of version 1.2.0 Extension documentation

Content Div Enabler (de_divmaker)

Enables the standard Typo3 Div pagecontent item, inserting a line (html hr tag).

Show extension details Download ZIP of version 0.1.0

FIX getDragDropCode (fix404getdragdropcode)

FIX template::getDragDropCode() JS errors in typo3 4.0.4

Show extension details Download ZIP of version 1.0.0

Creating Typo3 Tutorial Videos (doc_creating_video_tutorials)

This document describes, how screen capture videos can be produced and how a Typo3 video tutorial should be encoded.

Show extension details Download ZIP of version 1.0.4 Extension documentation

Sentry error reporting (sentry)

Sentry integration with TYPO3. This extension sends TYPO3 errors and warning to the Sentry system for monitoring and analyzing.

Show extension details Download ZIP of version 1.0.0 Extension documentation

Petabot (AI Chatbot) (petabot)

An AI chatbot plugin for Typo3 to boost support, engage users, and enhance your site with natural conversations.

Show extension details Download ZIP of version 2.1.0