Help TYPO3 certification take the next step

It has been a while since we started our expedition to bring a certification program to the TYPO3 community. During a very rainy day in August 2006, somewhere in the south of Bavaria/Germany a bunch…

Pre-announcement for important security update

Dear fellow TYPO3 enthusiast, we know you all are preparing for Christmas right now. We would therefore like to inform you in advance that you should be very awake and ready to do some maintenance on…

Information Disclosure possibility exploitable by Editors

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Filelist Module (ext:filelist, ext:core) Vulnerability Type: Information Disclosure Affected Versions: Versions 6.2.0 to…

Frontend login Session Fixation

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Frontend Login Vulnerability Type: Session Fixation Affected Versions: Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0 Severity:…

Standardization of TYPO3 Documentation—May 2022

In the past, creating full documentation for a TYPO3 project often started with copying and adapting the basic file structure of an existing set of documentation. Since creating documentation is not…

TYPO3 slidedeck

TYPO3 Slidedeck Is giving presentations part of your daily work? For sales pitches, for educational purposes, or for any other purposes? We have good news for you! There’s one thing we’ve heard again and again at the annual Agency Meetup Days…

Tutoriel TYPO3 pour les rdacteurs (typo3_tut_fr)

This extension provides a french translation of the documentation extension typo3_tut. This basic tutorial for editors explains how to add or change content on an existing website in TYPO3. It…

Show extension details Download ZIP of version 1.0.0 Extension documentation

Techniques to implement Comet with PHP (comet)

This extension implements several techniques to implement Comet with PHP. This can be useful to do things in real time without reload the page. You have to include manually Prototype JS…

Show extension details Download ZIP of version 1.1.0

The TYPO3 Demo Project Meets Hebrew

One of TYPO3's main strengths is its multilingual capabilities. It is built with international audiences in mind. TYPO3 has long supported non-Latin character sets, for example Arabic, Chinese, and…

tollwerk Google Analytics (tw_googleanalytics)

[TYPO3 CMS 7 Release] Frontend plugin for advanced Google Analytics integration with a wide range of features including pageView and event tracking, custom variables, cross domain tracking, tracking…

Show extension details Download ZIP of version 3.0.0 Extension documentation

Vibeo accessible HTML5 media player - Based on Med (vibeo)

This extension integrates the Vibeo project, an accessible media player based on MediaElement.js that is meant to respect the SGQRI standards of the provincial government of Quebec. It supports all…

Show extension details Download ZIP of version 0.5.0 Extension documentation

Content Request Form

Submit Content or a Content Idea It does not matter whether you are a writer or not—you can always help us create content for the TYPO3 websites. Fill in this form, and we will make sure you get the help you need . We will publish your finished…

checkit/verowa_importapi (verowa_importapi)

This extension connects to the Verowa API. To use it in your Typo3 project, you need a Verowa instance and an API key.Verowa is a Swiss organization tool for parishes. Verowa connects your team,…

Show package details

checkit/verowa_apiconnector (verowa_apiconnector)

This extension connects to the Verowa API. To use it in your Typo3 project, you need a Verowa instance and an API key.Verowa is a Swiss organization tool for parishes. Verowa connects your team,…

Show package details

checkitsedo/verowa-connector (verowa_connector)

This extension connects to the Verowa API. To use it in your Typo3 project, you need a Verowa instance and an API key.Verowa is a Swiss organization tool for parishes. Verowa connects your team,…

Show package details

checkitsedo/verowa-connect (verowa_connect)

This extension connects to the Verowa API. To use it in your Typo3 project, you need a Verowa instance and an API key.Verowa is a Swiss organization tool for parishes. Verowa connects your team,…

Show package details

Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.2.11 and below, 4.3.1 and below Vulnerability Types: Authentication Bypass, Cross-Site Scripting (XSS), Information Disclosure Overall Severity: High…

Accessible tables

Yes I told you so ;-) Rupert just published an extension for accessible tables. Martin Kutschker wrote: >> If you can live with fixed layouts like first-row-THs, first-col-THs, >>…

Cross Site Scripting in extension "Instagram" (ws_instagram)

Release Date: May 07, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross Site Scripting Affected Versions: 1.0.1 and…

Information Disclosure in User Authentication

Component Type: TYPO3 CMS Vulnerable subcomponent: User Authentication (ext:core) Release Date: May 7, 2019 Vulnerability Type: Information Disclosure Affected Versions: 9.0.0-9.5.5 Severity: Medium…

Information Disclosure in Page Tree

Component Type: TYPO3 CMS Vulnerable subcomponent: Page Tree (ext:backend) Release Date: May 7, 2019 Vulnerability Type: Information Disclosure Affected Versions: 9.0.0-9.5.5 Severity: Medium…

This Month in TYPO3

This is where we request your help! When you see interesting blog articles or other news regarding TYPO3, extensions, implementations, tutorials, snippets, or what else might fit, please let us know.…

Prepare for your “Certified TYPO3 Integrator” exam with ease!

Participants will learn about the certification, what is tested and how it is tested. There will be an introduction to all the subjects covered in the certification and everybody will do a short mock…

Going for one last round

This was announced inside the team in October 2013 and published in the related meeting minutes, but I guess only a few people noticed that fact. Hence this more official although belated…

Cross-Site Scripting in extension "Frontend Treeview" (mh_treeview)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross-Site Scripting Affected Versions: 0.1.0…