This Week in TYPO3 (Week 40, 2013)

Week Ending: October 4, 2013 Will TYPO3 Neos be competitive from day one? There was quite some lively feedback on Rasmus’s article on typo3.org about TYPO3 Neos. Rasmus mentions“.... [Neos] it is now…

Second TYPO3 CodeSprint Freiburg in 2012

About the ExtensionBuilder and PackageBuilder The ExtensionBuilder is a product of the TYPO3 community, which enables developers to create TYPO3 Extbase Extensions using a graphical user interface…

Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

Release Date: May 30, 2012 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.6 and below Vulnerability Type:…

This Month in TYPO3 (August, 2014)

The month of August of the Year 2014 TYPO3 CMS Flat design for TYPO3 CMS backend Felix Kopp announced in, what became a very lively twitter thread , a flat design for TYPO3 backend fully based on…

Multiple SQL Injection vulnerabilities in extension "Website Photo Gallery" (jm_gallery)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.1 and below Vulnerability Type: SQL Injection Severity: High…

French

Le Guide TYPO3 Publié à l’International Publié le 20 décembre 2020. Disponible au format papier et ebook. L’Association TYPO3 annonce un guide complet à destination des débutants sur la publication web avec TYPO3 CMS. Publié par l’éditeur Apress basé…

This Week in TYPO3 (Week 46, 2013)

Week Ending: November 15, 2013 TYPO3 Eastern European conference Cluj-Napoca, Transylvania, was the location for the Eastern European TYPO3 conference. Some 100 people came together to participate in…

TYPO3 4.0 Beta 1

TYPO3's fast innovation development rate is driven by the 19 core developers and 20000 member community, who provide product direction, core development, testing, translation, and extension…

Submit your 2013 budget application now!

This is Mike* and he is an open source enthusiast. He is browsing thru one of his favorites websites and finds interesting news. It's the TYPO3 Association's announcement for the call for budget…

French

TYPO3 v10 LTS est sorti — embarquant de nouvelles fonctionnalités, de meilleures performances et plus encore! La Communauté TYPO3 a livré une nouvelle version du gestionnaire de contenus TYPO3 (CMS) maintenue à long terme (LTS). La plateforme de…

Cross-Site Scripting vulnerability in extension Direct Mail (direct_mail)

Release Date: December 1, 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.4 and all versions below…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: December 13, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.48,…

Podcast about TYPO3 8

Shortly before the TYPO3 CMS 8.5 sprint release Sebastian Michaelsen interviewed Benni Mack about the overall development of TYPO3 8. This interview was just published as a new episode of the T3Bits…

TYPO3 v11 Release Material

TYPO3 v11 LTS is here! TYPO3 v11 LTS Release Material Explore the newest addition to the TYPO3 fleet with these helpful resources. With the release of TYPO3 v11 LTS on 5th October 2021, TYPO3 will reach yet another milestone. The release of TYPO3 v11…

TYPO3 GRUENE (startgreen)

TYPO3 für BÜNDNIS 90/DIE GRÜNEN. TYPO3 GRUENE ist ein Template und liefert eine Website im Design von BÜNDNIS 90/DIE GRÜNEN. Es ist responsive, optimiert für Smartphone, Tablet und Desktop. Mit Launch…

Show extension details Download ZIP of version 10.4.2 Extension documentation

All in One Accessibility (skt_allinoneaccessibility)

All in One Accessibility widget improves Typo3 website ADA compliance and browser experience for WCAG 2.1, ATAG 2.0, ADA, Section 508, Australian DDA, European EAA EN 301 549, UK Equality Act…

Show extension details Download ZIP of version 1.0.8

Several vulnerabilities in third party extensions

Release Date: June 14, 2011 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

TYPO3 Agency Meetup Days 2015 – A report on the Frankfurt meeting

Participants At the Frankfurt meetup 6 different agencies have gathered, with a total of 8 representatives. They have met Alain Veuve and Fabian Stein from the TYPO3 Marketing Team, Mathias Schreiber…

TYPO3 Neos Technical Discussion August 20th

TypoScript folder Neos stores TypoScript in Resources/Private , TYPO3 CMS with Extbase has the convention to store it in Configuration/TypoScript . In case of Neos somehow it makes sense to have it in…

TYPO3 CMS 6.0 released

After seven months of collaborative work a major new version of TYPO3 CMS has been released. In an team effort including over 100 people from several countries TYPO3 CMS 6.0 " Back To The Future "…

New Version of TYPO3 CMS 7 LTS now available

Baar, 2015-11-10 The new version of TYPO3 CMS 7 LTS is available effective immediately. It will be supported for three years as part of the Long Term Support from the TYPO3 CMS team. The completely…

Saarland

TYPO3 Usergroup Saarland Hier sind alle TYPO3-Interessierte aus dem Saarland oder auch außerhalb an der richtigen Stelle. Wir freuen uns über neue Mitglieder oder auch nur auf neue Besucher offline und online. Aktuelle Meldungen und Evenst findet ihr…

Broken Access Control in Import Module

Component Type: TYPO3 CMS Vulnerable subcomponent: Import/Export module (ext:impexp) Release Date: June 25, 2019 Vulnerability Type: Broken Access Control Affected Versions: 9.3.0-9.5.7 Severity: High…

TYPO3 conference survey

This year was packed with TYPO3 events. We had an unprecendented number of codesprints and TYPO3camps. As usual there are the official TYPO3 events like the Snowboard Tour, the TYPO3 conference and…

Tip-a-friend - Header Injection

Component Type: Third party extension. The extension is not part of the TYPO3 default installation Affected Versions: 1.2.2 and earlier Vulnerability Type: Header Injection Severity: HIGH Problem…