TYPO3 COOP – University gathering was held in Darmstadt

For the first time this meeting was held in the center of Germany in the city of Darmstadt, allowing the participants to stick their heads together. On both days there were conference style talks,…

Cross Site-Scripting in extension "Caretaker" (caretaker)

Release Date: December 18, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.8.0 and below Vulnerability Type:…

Authentication Bypass in extension "Frontend User Registration" (sf_register)

Release Date: December 18, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 8.8.0 Vulnerability Type:…

Denial of Service in Page Error Handling

Component Type: TYPO3 CMS Subcomponent: Page Error Handling (ext:core, ext:frontend) Release Date: September 13, 2022 Vulnerability Type: Denial of Service Affected Versions: 11.4.0-11.5.15 Severity:…

pixx.io integration for TYPO3 (DAM) (pixxio)

Integrate pixx.io DAM Digital Asset Management into TYPO3. Use files from your pixx.io media pool with TYPO3 easily and without any detour. Use the search field to search through your pixx.io media…

Show extension details Download ZIP of version 1.0.7 Extension documentation

FE Autologin (sg_feautologin)

OBSOLETE! In Typo3 4.0.2 it is included in the core; For older Version use "core_permalogin" for upward-compatibility. Lifetime for FE-User Cookies will be set to 14 days (changeable in…

Show extension details Download ZIP of version 0.4.0

ListElement(SJ) (sj_list_element)

Working with different Typo3 setups showed that every now and then RTE problems like ignoring certain html tags occured. Instead of adding typoscript fragments here and there this EXT can simply be…

Show extension details Download ZIP of version 0.0.5

typoniels/site_belogin (site_belogin)

This Extension make it possible to configure a background image and logo for the typo3 backend login in the Site-Management Module per Site, and if no site configuration can be obtained from the…

Show package details

pixx.io (pixxio_extension)

Integrate pixx.io DAM Digital Asset Management into TYPO3. Use files from your pixx.io media pool with TYPO3 easily and without any detour. Use the search field to search through your pixx.io media…

Show extension details Download ZIP of version 3.1.0 Extension documentation

Language Detection (rlmp_language_detection)

This plugin detects the visitor's preferred language and sets the local configuration for TYPO3's language engine accordingly. Both, one-tree and multiple tree concepts, are supported. It can also…

Show extension details Download ZIP of version 8.1.2 Extension documentation

GSoC 2012: We need your help

On last monday the organization application phase of the GSoC 2012 did start. The deadline is the next friday the 9.3. Which means we have like one week from now. Now it's our turn to apply and to do…

TYPO3 4.1.6

TYPO3 version 4.1.6 is ready for download. It is a maintenance release of version 4.1 and therefore contains only bugfixes. A total of 21 issues has been resolved ranging from subjects like Inline…

TYPO3 v13.3 — Prepare for the Fun

TYPO3 developers have been on fire these past few weeks, hustling to deliver every feature we committed to implement during the TYPO3 v13 release cycle. TYPO3 version 13.3 received more than 20 new…

Cross-Site Scripting in extension "Bootstrap Package" (bootstrap_package)

Release Date: June 15, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.15 and below Vulnerability Type:…

Multiple vulnerabilities in extension "http:BL Blocking" (mh_httpbl)

Release Date: May 31, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 1.1.7 and below Vulnerability Type: SQL injection,…

Content Strategy/Builder Tool in TYPO3

What is your idea about? Research and start development of a UI for rapidly and effectively creating a content structure and content for TYPO3 sites using TYPO3's unique content structure. What is the…

Security Bulletin TYPO3-20080416-1: Multiple vulnerabilities in extension de_phpot

Please read the entire security bulletin here: Security Bulletin TYPO3-20080416-1: Multiple vulnerabilities in extension de_phpot We also recommend that you subscribe to the TYPO3 Announce List ,…

File Disclosure in extension "Zend Framework Integration" (zend_framework)

Release Date: September 30, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.7.6 and below Vulnerability Type:…

Access Bypass in extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase)

Release Date: February 12, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: yag: Version 3.0.0 and below, pt_extbase:…

TYPO3 4.7 beta3 released

The TYPO3 community released TYPO3 4.7 beta3 as the next step on our roadmap to the final release of 4.7.0, which will be released on April 24th, 2012. As usual, beta versions only includes bug fixes.…

Cross-Site Scripting vulnerability in extension Commerce (commerce)

Release Date: August 18, 2009 Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 0.9.8 and below. Vulnerability Type:…

TYPO3 Code Sprint Berlin 2011 #T3CSB11

In the first week of March, 41 active contributors of the TYPO3 Community met for five days at the Technical University in Berlin to kickstart projects for TYPO3 4.6, tie up loose ends with FLOW3, and…

Broken Access Control in extension "femanager" (femanager)

Release Date: December 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "femanager" (femanager) Composer Package Name:…

Service Announcement: New mailserver for typo3.org

The migration is going to take place on Monday, 5th of October 2015 . If you own a @typo3.org email address then you should have received an email with further instructions by September 24. The…

TYPO3 Security Bulletin

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.5.3 and below Vulnerability Type: Cross-Site Scripting, SQL…