Results of the 2025 TYPO3 Association Elections

When the election closed, at midnight, 31 March, more than 325 members had cast their votes. Giving Thanks to New and Old While congratulating the election winners, let's also give a big thank-you to…

Mass Assignment in extension Direct Mail Subscription (direct_mail_subscription)

Release Date: February 12, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.0.0 and below Vulnerability Type:…

Arbitrary code execution in extension "powermail" (powermail)

Release Date: May 22, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: powermail: Versions 2.0.13 and below, 1.6.10 and…

Broken Access Control in Backend AJAX Routes

Component Type: TYPO3 CMS Subcomponent: Backend Routing (ext:backend) Release Date: September 9, 2025 Vulnerability Type: Broken Access Control Affected Versions: 9.0.0-9.5.54, 10.0.0-10.4.53,…

Content

The Content Group Write, Translate, Proofread The TYPO3 Content Group is searching for motivated TYPO3 community members, who are interested in giving something back to our favorite Content Management System. This is the group where no coding skills…

Directory Traversal and Code Injection vulnerability in extension phpMyAdmin (phpmyadmin)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.11.1 and below Vulnerability Type: Directory Traversal, Code…

Cross-Site Scripting in Language Pack Handling

Component Type: TYPO3 CMS Vulnerable subcomponent: Language Pack Handling (ext:install) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.2.0-9.5.3 Severity:…

Announcing Official PHP 8.2 Support for Current TYPO3 Versions

Updated 10 January 2023: Added the section TYPO3 v11 LTS and PHP 8.2 Caveats With PostgreSQL . Read the PHP 8.2 Release Notes In the past months we worked hard, with both manual and automatic testing,…

FLOW3 at Campus Party Europe 2012

Campus Party Europe, the biggest techfest on earth, is taking place in Berlin 21st to 26th of August. Expected are no less than 10.000 visitors for 24 subject areas on 11 stages packed with high tech…

Friday Bugday

Sponsor of this bugday is wmdb Systems GmbH Am Wehrhahn 41 40211 Düsseldorf When you are near by, you are invited to come to wmdb for joining the bugday! Join us on IRC: irc://irc.freenode.net/…

TYPO3 Security Bulletin

Component Type: Core Affected Component: mailforms Version: 3.7.0 and earlier Vulnerability Type: Potential Spam Abuse Severity: Low Problem Description: Unless the default encryption key settings…

Several vulnerabilities in third party extensions

Release Date: February 23, 2012 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

Several vulnerabilities in extension mm_forum (mm_forum)

Release Date: February 12, 2014 Bulletin update: September 18, 2014 (added CVEs) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected…

Server-Side Request Forgery via Webhooks

Component Type: TYPO3 CMS Subcomponent: Webhooks (ext:webhooks) Release Date: May 20, 2025 Vulnerability Type: Server-Side Request Forgery Affected Versions: 12.0.0-12.4.30, 13.0.0-13.4.11 Severity:…

Fluid Template Engine

Fluid - A fast and secure template engine TYPO3 Fluid is a template engine for PHP. It is fast, secure and extensible. The Fluid Template Engine is powering modern TYPO3 sites, as a quick way to customize HTML-based output for any PHP-based project.…

eCommerce / Merchant Membership

TYPO3 Association eCommerce/Merchant Memberships For eCommerce, merchant, and retail companies of these categories: Analytics and insights Digital goods and virtual items Digital marketing and advertising Direct-to-consumer (DTC) brands Drop-shipping…

UPDATE - The TYPO3 Core Development Team comes to Italy (canceled)

We are very sorry to announce that we have to cancel the codesprint. Due to the Expo taking place in Milano, we were not able to strike a deal with a hotel to provide accomodation for an acceptable…

We Want You as Core Merger in 2021

In March 2019, we introduced a revised core development structure, consisting of four groups for coordinating TYPO3 Core development Core Initiatives Component Mergers Framework Mergers Product Team…

Carrier failure causes outages on typo3.org infrastructure

Due to an unplanned power failure at our network carrier, the data center where some typo3.org subdomains are hosted have been completely offline from June 24 04:37:15 UTC+2 to June 24 19:28:48 UTC+2…

Important Security-Bulletin Pre-Announcement

Type: Pre-Announcement Component Type: TYPO3 CMS Scheduled Release Date: February 7, 2023 Affected Versions: 8.7.0-8.7.50, 9.0.0-9.5.39, 10.0.0-10.4.34, 11.0.0-11.5.22, 12.0.0-12.1.3 Suggested…

MoceanSMS Login (mocean_sms_login)

MoceanAPI Two Factor Authentication (2FA) Login Typo3 Extension allows frontend users to opt in to SMS 2FA verification for login. You can send OTP via SMS text message to your users. This extension…

Show extension details Download ZIP of version 1.0.2 Extension documentation

PMK HTML Crop (pmkhtmlcrop)

Safe cropping of HTML content. Adds a new command (htmlCrop) to stdWrap using hook in TYPO3 v4.2. Can be uses as a userFunc in older versions of TYPO3. Using this function instead of the standard…

Show extension details Download ZIP of version 1.0.1 Extension documentation

Manuel dInstall Typo3 sous linux (jg_linux_fr)

Pour les dbutants (newbees) cest sans doute un tutorial principal, qui vous aprendra installer les logiciels et Typo3 sous linux. ATTENTION toutefois, document non encore valid par nos soins mais mis…

Show extension details Download ZIP of version 0.0.1 Extension documentation

Invoicing the TYPO3 Association

Invoicing the TYPO3 Association Comply With the Regulations All invoices must be submitted through the reimbursement tool . If you're not the budget owner, please make sure to get pre-approval before expenses are incurred. To make sure your invoice…

Explanation of the T3A 2016 budget

Last month, we sent out the budget agreements for 2016 and in this article we are going to explain how the budgets have been assigned for 2016 and the motivations for the decisions we made.…