Cross-Site Scripting vulnerability in extension powermail for TYPO3 (powermail)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.4 and below Vulnerability Types: Cross-Site Scripting Severity:…

The inside story - weeks 20+21

Zap the Gremlins? Semi-Automatic Conversation? This sounds like great fun! As far as I have heard the people had some fun in the "Research and Development Workshop" - but most of all they brought back…

Multiple vulnerabilities in extension "DRC News Comment" (news_comment)

Release Date: December 18, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.7 and below Vulnerability Type:…

multiblog (multiblog)

A blog extension for TYPO3: complete Frontend editig of a blog, including several blog widgets, comment system, facebook, google and twitter sharing buttons and seo fields. Fully social individual…

Show extension details Download ZIP of version 1.0.1 Extension documentation

FE Autologin and Nested FE Groups (sg_feautologinnest)

OBSOLETE! In Typo3 4.0.2 permalogin is included in the core; For older Version use "core_permalogin" for upward-compatibility. OBSOLETE! Nested FE-Groups are in the core since 4.0.0; Lifetime for…

Show extension details Download ZIP of version 0.4.0 Extension documentation

CeBIT-Special: Become member, save the registration fee!

If you visit our booth at CeBIT and apply for your membership there, you will save the registration fee. Usually a new member of the TYPO3 Association has to pay a one time registration fee which is…

Cross Site-Scripting in extension "CAB FAL search" (falsearch)

Release Date: November 07, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.2.0 and below Vulnerability Type:…

Information Disclosure in third party extension "Frontend User registration"

Release Date: April 6, 2009 Component Type: Third party extension. This extension is not a part of a TYPO3 default installation. Affected Versions: 2.5.20 and all versions below Vulnerability Type:…

T3BRAND: Website Relaunch

Starting with the TYPO3.com and TYPO3.org websites a great leap forward has been made in communicating our new CI to the public. Both websites, which had remained virtuallly unchanged since their…

SQL Injection in extension "Event management and registration" (sf_event_mgt)

Release Date: April 10, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.8.0 and below Vulnerability Type: SQL…

A thousand+ certified integrators

The TYPO3 Certification Team is proud to announce that we have reached the mark of 1000 TYPO3 Certified Integrators. In fact, at the time of this writing, there are 1032 individuals that have…

Insecure Unserialize and SQL Injection in extension "Code Highlighter" (mh_code_highlighter)

Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.2.10 and below Vulnerability Type:…

This Month in TYPO3 - September 2018 - Issue #6

This Month in TYPO3 - September 2018 - Issue #6 The September edition is rather brief since everybody is busy preparing for the upcoming release of TYPO3 9 LTS, either by contributing to the TYPO3 core, updating extensions to be compatible with TYPO3…

Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)

Release Date: September 12, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.8 and below Vulnerability Type:…

Five on six

During development on 5.0 last week I came to the point where I needed to implement some functionality doing string operations. As we don't want to fiddle around with the mbstring extension anymore it…

Multiple vulnerabilities in extension "Ajax mail subscription" (ods_ajaxmailsubscription)

Release Date: March 24, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.4.4 and below Vulnerability Type:…

Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

Release Date: November 17, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: View frontend statistics (view_statistics)…

French

Les TYPO3 Awards 2023 célèbrent l’excellence du CMS après quatre ans de pause Les meilleurs sites web et intranets conçus avec le CMS TYPO3 ont été célébrés au gala de remise des prix TYPO3 à Düsseldorf, en Allemagne. Parmi les 221 candidatures…

Mentorship

The International TYPO3 Mentorship Program The TYPO3 International Mentorship program brings TYPO3 to new countries. TYPO3 CMS is a performant, secure, and flexible CMS, well-suited for many types of projects. Through individual mentorship, we show…

TYPO3 Communication OKRs Initiative 2022/2023

Open Strategy Partners (OSP) is acting as Scrum master, and the project owner for the initiative is Mathias Bolt Lesniak. In the early months of 2022, the Board members participated in a series of…

SQL Injection vulnerability in extension wt_directory (wt_directory)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.4.1 and below Vulnerability Type: SQL…

Marketing in NL

Emerce Digital Marketing Live in NL Idea Submitted by : Ronald Meeuwissen What is your idea about? Promotion of TYPO3 in the Netherlands. What is the potential impact of your idea? Reach thousands of Digital Marketing experts with a booth for example…

Server-Side Request Forgery via Webhooks

Component Type: TYPO3 CMS Subcomponent: Webhooks (ext:webhooks) Release Date: May 20, 2025 Vulnerability Type: Server-Side Request Forgery Affected Versions: 12.0.0-12.4.30, 13.0.0-13.4.11 Severity:…

Improper Access Control vulnerability in extension fal_sftp (fal_sftp)

Release Date: October 17, 2014 Bulletin Update: October 18, 2014 (added CVE) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…

Results of the TYPO3 Association Elections 2015

The TYPO3 Association elections that took place between March 21 and April 4 2015, have given the following results: Elected T3A Expert Advisory Board members: Boris Hinzer Boris lives with his wife…