Multiple vulnerabilities in extension ve_guestbook

Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 1.9.3 and below Vulnerability Type: SQL Injection, Cross Site Scripting…

TYPO3 Dialogue Days 2015 - What was it about?

More than 20 participants from the Board, Expert Advisory Board (EAB), Business Control Committee (BCC), several teams, as well interested community members joined the event on the first day. On…

Sensitive Data Exposure in extension "Job Fair" (jobfair)

Release Date: November 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job Fair" (jobfair) Vulnerability Type: Sensitive…

Denial of Service in extension "Authenticator" (defbu_authenticator)

Release Date: November 17, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Authenticator (defbu_authenticator) Vulnerability…

TYPO3Camp Venlo 2016

TYPO3camp Venlo is an international camp that is conveniently situated on the Dutch German border and thus brings together both nationalities and even some from Belgium, France and Switzerland. Just…

Security Bulletin TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats) We also recommend that you subscribe to the TYPO3…

Extraction of TYPO3 Extension Repository

As announced in earlier news, a relaunch for the typo3.org website has is currently in the works. One of the steps needed for that is to extract the TYPO3 extension repository (TER) away from…

EAB and Board Meeting (CEBAB)

On August 13, a combined EAB and Board Meeting (CEBAB) took place in Düsseldorf. The EAB and Board met to discuss the revised TYPO3 Association budget process and various other topics. The following…

TYPO3 Security Bulletin

Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance amongst the TYPO3 Community.…

Insecure Direct Object Reference in extension "powermail" (powermail)

Release Date: September 17, 2024 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "powermail" (powermail) Composer Package Name:…

Italian

Presentato il relatore principale per la T3CON23: Nicholas Janni terrà il discorso chiave alla TYPO3 Conference 2023 Il progetto TYPO3 è entusiasta di annunciare Nicholas Janni come relatore della 15° Conferenza TYPO3 (T3CON23). L’esperto di…

TYPO3 4.5.1 released

We are announcing the release of the following TYPO3 updates: TYPO3 4.5.1 & Introduction Package 4.5.1 This is a maintenance release and contain only bugfixes. Users of 4.5.0 are strongly advised to…

Non-Persistent Cross-Site Scripting in extension "Static Methods since 2007" (div2007)

Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.6.8 and below Vulnerability Type:…

TemplaVoila! (templavoila)

Point-and-click, popular and easy template engine for TYPO3. Public free support is provided only through TYPO3 mailing lists! Contact by e-mail for commercial support.

Show extension details Download ZIP of version 2.0.4 Extension documentation

Environment Banner (cwenvbanner)

Adds a small Banner in both FE and BE and changes title tag to easWier distinct between different Typo3 installations (hopefully no more "Ups - I was on Live all the time...")

Show extension details Download ZIP of version 1.0.0 Extension documentation

Chess Diagram (lz_chess)

Display Chess Diagrams on your webpage using a Typo3 content element. Supports a wide variety of chess variants, and custom board positioning of the pieces.

Show extension details Download ZIP of version 0.0.3 Extension documentation

Direct Mail Address with Gender (dfluess)

Produces an address with respective gender. Make possible different senders URL within a Typo3 installation. Note: At present only the German gender address is supported!

Show extension details Download ZIP of version 0.0.3

TYPO3 CMS Backend Styleguide and Testing use cases (styleguide)

Presents most supported styles for TYPO3 backend modules. Mocks typography, tables, forms, buttons, flash messages and helpers. More at https://github.com/TYPO3/styleguide

Show extension details Download ZIP of version 12.0.5 Extension documentation

Polaroyd Website Template (bj_polaroyd)

The TYPO3 theme which includes a full configured frontend theme for TYPO3, based on the Bootstrap CSS Framework. URL: https://templatemag.com/demo/Polaroyd/

Show extension details Download ZIP of version 1.0.1 Extension documentation

LUX - TYPO3 Marketing Automation (lux)

Living User Experience - LUX - the Marketing Automation tool for TYPO3. Turn your visitors to leads. Identification and profiling of your visitors within your TYPO3 website.

Show extension details Download ZIP of version 38.5.1 Extension documentation

Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer)

Release Date: May 12, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: SVG Sanitizer (ext:svg_sanitizer) Vulnerability Type:…

Evangelism and outreach

I am very interested what Andy Grunwalds community metrics project reveals about TYPO3. One thing I am pretty sure off is that a graph displaying the location of TYPO3 contributors will show that…

Want to Improve TYPO3? Join a Community Team.

Thank you to the TYPO3 Community Team Leads for helping out with this article on top of everything they do for the project and community. The community contribution section here on TYPO3.org is the…

Budget

Budget 2025 The budget of the TYPO3 Association is created yearly by the Board.. For 2025 the continuation of the Strategy Process and Implementation of the Product Strategy are the focus. The Budget 2025 covers 1.050.000 € The TYPO3 company will…

Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

Release Date: November 17, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: phpMyAdmin (phpmyadmin) Vulnerability Type: SQL…