CMD Source Include (cmd_srcinc)

This extension collect internal/external source file and include them internaly to typo3. This help to improve score of YSlow or GTMetrix, but help too to not depend on lower server/connexion to other…

Show extension details Download ZIP of version 6.0.0 Extension documentation

New Record Wizard CSM (newrecordwiz)

This extension adds an item in the Typo3 context sensitive menu which allows you to create pages, content, and database records directly from the menu. This way, you get exactly the same…

Show extension details Download ZIP of version 0.1.0 Extension documentation

Social Publisher (social_autopublish)

Social Publisher allows to publish your typo3 website content into different social media pages like Facebook, Twitter, Linkedin and Xing. Easy to configure, and also there is an option to test the…

Show extension details Download ZIP of version 1.0.2 Extension documentation

pp_lib - Filter PI templates (pp_filtertemplates)

Add an "explicit deny" checkboxes list in Typo3 BE users/groups, to filter available plugins templates (for plugins using pp_lib template selector feature, belink_lastupdates for instance)

Show extension details Download ZIP of version 1.0.0

Google Docs to TYPO3 Importer (ns_googledocs)

Tired of copying content manually from Google Docs to TYPO3? This extension lets you import Google Docs into TYPO3 pages, blogs, and news with a single click—saving time and improving productivity.

Show extension details Download ZIP of version 2.0.2 Extension documentation

Cross Site Scripting vulnerability in extension Questionaire (pbsurvey)

Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 1.2.0 and below Vulnerability Type: Cross Site Scripting Severity:…

SQL Injection in extension "Content Rating Extbase" (content_rating_extbase)

Release Date: May xx, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.0.3 and below Vulnerability Type: SQL…

TYPO3 Security Bulletin 20070719-1: Remote shell command execution in extensions embedding PHPMailer

Please read the entire security bulletin here: TYPO3 Security Bulletin TYPO3-20070719-1: Remote shell command execution in extensions embedding PHPMailer We also recommend that you subscribe to the…

Italian

Rilasciato TYPO3 v10 LTS — nuove funzionalità, aumento delle prestazioni e ‘user experience’ unica incluse La Community TYPO3 ha rilasciato una nuova versione LTS (Long Term Support) del Content Management System TYPO3, la piattaforma per la…

Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

Release Date: May 07, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions: 5.2.4…

SQL Injection in extension "Shibboleth Authentication" (shibboleth_auth)

Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.6.3 and below Vulnerability Type:…

SQL Injection in extension "One is Enough Library" (oelib)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "One is Enough Library" (oelib) Vulnerability Type: SQL…

Extbase / Fluid Cheat Sheet

You will find all relevant API information, naming conventions, an overview about the directory structure and many more information. The sheet is devided into two sides - one for Extbase and the other…

TYPO3 CMS 4.5.25, 4.6.18, 4.7.10 and 6.0.4 released

We are announcing the releases of the following TYPO3 CMS updates: TYPO3 CMS 4.5.25 TYPO3 CMS 4.6.18 TYPO3 CMS 4.7.10 TYPO3 CMS 6.0.4 These versions are maintenance releases and contain bugfixes only.…

TYPO3 in 80 characters

"Describe TYPO3 in max 80 characters. Use #typo3in80chars to win a prize on T3CON10. All entries have a chance!" Prizes will be drawn randomly from all entries that are used at the conference. Prizes…

By-passing protection of Phar Stream Wrapper Interceptor

Release Date: May 8, 2019 Component Type: PharStreamWrapper (package typo3/phar-stream-wrapper ) Impact: By-passing protection against insecure deserialization Affected Versions: 2.0.0-2.1.0 and…

"What ever happened to..." the results of T3UXW09?

The results were incredible, and a lot of new ideas were conceived and directly implemented. However, the integration work - to polish the new code so it fits the high TYPO3 Core standards - wasn't…

Translate TYPO3 Backend In-Context

From Prototype to Reality One of the key items on our agenda was testing and evaluating what began as a proof-of-concept about two years ago. Approximately two years ago, while the team was preparing…

T3CON09 survey published

Thank you for participating in the survey for the last TYPO3 Conference T3CON09. We published the overly positive results on the official conference website:…

TYPO3 Agency Meetup Days 2015 – A report on the Copenhagen and Berlin meetings

Participants At the Danish meetup seven different agencies gathered with representatives of the TYPO3 CMS core team, of the marketing team, and of the TYPO3 Association. These being Mathias Schreiber,…

India

Welcome to iTUG - India TYPO3 User Group We regularly meet at every 1st Friday of the Month with TYPO3 Enthusiast at NITSAN Technologies . Everyone interested in TYPO3, whether beginner or professional, is welcome! iTUG Activities TYPO3…

TYPO3 Security Bulletin

Component Type: Core Affected Components: showpic.php Versions: TYPO3 3.8.0 and earlier Vulnerability Type: Cross Site Scripting Severity: High Problem Description: A Cross Site Scripting issue has…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: September 13, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.0.0-7.6.57,…

Status of ReStructured Text migration (September 2012)

The migration of the official documentation to ReStructured Text has mode big progress during the last few months, although most of it is not visible. Martin Bless has been busy optimizing the Python…

This Week in TYPO3 (Week 45)

Week ending November 7 TYPO3 CMS Embrace & Innovate Benni Mack, one of the core team leaders of the TYPO3 CMS team, published ' Embrace and Innovate - TYPO3 CMS 7 ' in the beginning of this month,…