Elections of the TYPO3 Association

All members of the TYPO3 Association should have received a voting token via e-mail. The elections will be closed at the 31st of January 2014 23:59 CET. If you are a member of the TYPO3 Association,…

File Content Injection in extension "Hardcoded text to Locallang" (mqk_locallangtools)

Release Date: February 15, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: “Hardcoded text to Locallang" (mqk_locallangtools)…

Insecure direct object reference in extension "Varnishcache" (varnishcache)

Release Date: February 15, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Varnishcache" (varnishcache) Vulnerability Type:…

T3CON Membership Upgrade Campaign

This campaign ended end of December 2018. Read more about TYPO3 Association memberships or become a member . Upgrading to Bronze Silver Gold Platinum Pin and ribbon with stars Possibility to win a…

Content Blocks on the Way to the Core

Integrating the Separate Parts of Content Blocks Into the Core An important building block in the procedure is the exchange with the Core team. Based on this exchange, we have been able to encapsulate…

Results of the 2025 TYPO3 Association Elections

When the election closed, at midnight, 31 March, more than 325 members had cast their votes. Giving Thanks to New and Old While congratulating the election winners, let's also give a big thank-you to…

The TYPO3 Demo Website is Launching

Try Out the Demo Site Now What’s the Need for a Demo Project? You know the familiar situation: You’re at an event or having a meeting getting to know potential clients who have never used TYPO3…

German

TYPO3 Guidebook für internationales Publikum veröffentlicht Veröffentlicht seit 20. Dezember 2020. Erhältlich als Buch in gedruckter Form und e-book. Die TYPO3 Association kündigt einen umfassenden Einsteigerleitfaden für Web-Publishing mit TYPO3 an.…

Improper Access Control of Resources Referenced by t3:// URI Scheme

Component Type: TYPO3 CMS Subcomponent: Link Handler (ext:core, ext:backend, ext:filelist) Release Date: February 13, 2024 Vulnerability Type: Information Disclosure Affected Versions: 8.0.0-8.7.56,…

T3CON07: Slides of 5.0-related talks online

After the TYPO3 Conference 2007 in Karlsruhe the slides of all talks related to TYPO3 5.0 are available for download. Robert Lemke and Daniel Hinderink outline benefits of the new architecture for…

Several vulnerabilities in extension Formhandler (formhandler)

Release Date: August 05, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Version: 1.6.0 and alll versions below Vulnerability Type:…

Sensitive Information Disclosure in “Extbase Yaml Routes” (routes)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: “Extbase Yaml Routes” (routes) Vulnerability Type:…

This Week in TYPO3 (Week 40, 2013)

Week Ending: October 4, 2013 Will TYPO3 Neos be competitive from day one? There was quite some lively feedback on Rasmus’s article on typo3.org about TYPO3 Neos. Rasmus mentions“.... [Neos] it is now…

Second TYPO3 CodeSprint Freiburg in 2012

About the ExtensionBuilder and PackageBuilder The ExtensionBuilder is a product of the TYPO3 community, which enables developers to create TYPO3 Extbase Extensions using a graphical user interface…

TYPO3 4.0 Beta 1

TYPO3's fast innovation development rate is driven by the 19 core developers and 20000 member community, who provide product direction, core development, testing, translation, and extension…

Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

Release Date: May 30, 2012 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.6 and below Vulnerability Type:…

Multiple SQL Injection vulnerabilities in extension "Website Photo Gallery" (jm_gallery)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.1 and below Vulnerability Type: SQL Injection Severity: High…

This Month in TYPO3 (August, 2014)

The month of August of the Year 2014 TYPO3 CMS Flat design for TYPO3 CMS backend Felix Kopp announced in, what became a very lively twitter thread , a flat design for TYPO3 backend fully based on…

Cross-Site Scripting vulnerability in extension Direct Mail (direct_mail)

Release Date: December 1, 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.4 and all versions below…

All in One Accessibility (skt_allinoneaccessibility)

All in One Accessibility widget improves Typo3 website ADA compliance and browser experience for WCAG 2.1, ATAG 2.0, ADA, Section 508, Australian DDA, European EAA EN 301 549, UK Equality Act…

Show extension details Download ZIP of version 1.0.8

French

Le Guide TYPO3 Publié à l’International Publié le 20 décembre 2020. Disponible au format papier et ebook. L’Association TYPO3 annonce un guide complet à destination des débutants sur la publication web avec TYPO3 CMS. Publié par l’éditeur Apress basé…

This Week in TYPO3 (Week 46, 2013)

Week Ending: November 15, 2013 TYPO3 Eastern European conference Cluj-Napoca, Transylvania, was the location for the Eastern European TYPO3 conference. Some 100 people came together to participate in…

Podcast about TYPO3 8

Shortly before the TYPO3 CMS 8.5 sprint release Sebastian Michaelsen interviewed Benni Mack about the overall development of TYPO3 8. This interview was just published as a new episode of the T3Bits…

French

TYPO3 v10 LTS est sorti — embarquant de nouvelles fonctionnalités, de meilleures performances et plus encore! La Communauté TYPO3 a livré une nouvelle version du gestionnaire de contenus TYPO3 (CMS) maintenue à long terme (LTS). La plateforme de…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: December 13, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.48,…