Cross-site scripting vulnerability in extension Ameos Formidable (ameos_formidable)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.373 and below Vulnerability Type: Cross-site scripting Severity:…

Cross-Site Scripting vulnerability in extension Basic SEO Features (seo_basics)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.8.1 and below Vulnerability Type: Cross-Site Scripting Severity:…

This Week in TYPO3 (Week 15, 2014)

Week ending April 11 TYPO3 Flow/Neos After 265 commits, thousands of lines of code changed and 2 code sprints, we release the first beta version of Neos 1.1 today. A total number of 30 contributors,…

TYPO3 v13.3 — Prepare for the Fun

TYPO3 developers have been on fire these past few weeks, hustling to deliver every feature we committed to implement during the TYPO3 v13 release cycle. TYPO3 version 13.3 received more than 20 new…

Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation. Affected Versions: Version 0.6.0 and below Vulnerability Type: Cross Site Scripting, Remote…

Cross-Site scripting vulnerability in extension t3blog (t3blog)

Release Date: September 27, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.1 and all versions below…

TYPO3 4.5beta4 released

Tonight the TYPO3 community released the fourth beta version of TYPO3 4.5. This is the last snapshot of the development on the road to 4.5.0, which will be released on January 26th, 2011. Development…

Authentication Bypass in TYPO3 CMS

Component Type: TYPO3 CMS Vulnerable subcomponent: Salted Passwords (ext:saltedpasswords) Release Date: July 12, 2018 Vulnerability Type: Authentication Bypass Affected Versions: 7.0.0 to 7.6.29,…

typo3.org recap 2018

It is now nearly a tradition that our team meets after the TYPO3camp Rhein-Ruhr. Our sprint started right after the camp ended. 82 tickets and 76 merge requests were done. Common Infrastructure Speed:…

TYPO3 Security Bulletin

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.7.0 and all versions below Vulnerability Type: Cross Site Scripting,…

Cross-site scripting vulnerability in extension Seminars (seminars)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.3 and below Vulnerability Type: Cross-site scripting Severity:…

Multiple vulnerabilities in extension Send-A-Card (sr_sendcard)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.2.2 and all versions below Vulnerability Type: Insufficient…

TYPO3 4.5.13 and 4.6.6 released

The TYPO3 Community announces versions 4.5.13 and 4.6.6 of the TYPO3 Enterprise Content Management System. We are announcing the release of the following TYPO3 updates: TYPO3 4.5.13 TYPO3 4.6.6 All…

KJ: Recycler 2008 (kj_recycler)

OBSOLETE: see new recycler at http://forge.typo3.org/projects/show/extension-recycler ! In TYPO3 no file is really deleted. When you delete a template, page or page content, it is no more displayed…

Show extension details Download ZIP of version 5.0.0 Extension documentation

Retro Statistics - Re-introduce logfile apache sty (retrostats)

Re-introduces the good old apache-style logfile written by TYPO3. This should make extensions like AWstats work again with TYPO3 versions 6 and higher. Place the [FE][logfile_dir] setting in…

Show extension details Download ZIP of version 0.1.2 Extension documentation

TER Update Check (ter_update_check)

This extension adds a new function to the EM of Typo3 that enables the administrator to get a quick overview what extensions have a newer version in TER than the one installed. It also provides a CLI…

Show extension details Download ZIP of version 0.8.0 Extension documentation

PowerSearch UI Default (powersearchui)

PowerSearch is an extensible, powerful search framework to index typo3 content, files (pdf/txt/doc) and other sources out of the box. It consists of the framework module (PowerSearch), the indexer…

Show extension details Download ZIP of version 1.0.2 Extension documentation

Smarty Template Engine Wrapper, Smarty v2.6.14 (sc_smarty)

Easy-to-use, upgradeable (unmodified smarty source)! Without any magic T$-configuration - use it to effectively develop your own extensions! Plugins without modifications useable. Typo3 cache-handling…

Show extension details Download ZIP of version 1.0.3

PowerRotator (cw_powerrotator)

PowerRotator for TYPO3. This Extension adds PowerRotator from Adobe to your TYPO3 website. It supports following effects: Ken Burns, fading, crossfading, windows, audio, links, captions an much…

Show extension details Download ZIP of version 3.0.1

Report From The Content Types Team

Following this, a self-organized codesprint event in Düsseldorf focused on extending the GUI for EXT:content_blocks , resulting in a comprehensive first draft. We have also welcomed two new members,…

TYPO3 Agency Meetup Days 2015 – A report on the Utrecht and Munich Meetups

Participants At the German meetup 13 different agencies gathered with representatives of the TYPO3 CMS core team, and of the marketing team. These being Benni Mack, Alain Veuve, and Christian Händel.…

The Marketing Team in 2012

Recently a code sprint was held to streamline the current instance of typo3.org. Four code sprints for maintenance of typo3.org are planned for 2013. The marketing team has it’s own project page on…

Deprecation and Shutdown of TER SOAP Interface

The SOAP interface was introduced more than 15 years ago, for managing and uploading extensions. TYPO3 version 4.5 was the last version when you could upload extensions via the TYPO3 backend. What Is…

Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

Release Date: August 8, 2012 Bulletin update: August 9, 2012 (added update help for extension manager, added further download link) Component Type: Third party extension. This extension is not a part…

Announcing TYPO3 CMS 7.3 - More Stability, More Control

Since the release of TYPO3 CMS 7.2 back in April, the team focussed on certain topics under the hood to make the code base simpler and easier to maintain, while providing new standards for setting up…