Cross-Site Scripting in jQuery before 3.4.0

Release Date: Date: May 7, 2019 Component: jQuery (bundled in TYPO3 core package, ext:core) Impact: Cross-Site Scripting, Known Vulnerability Affected Versions: all jQuery versions before 3.4.0 CVE:…

TYPO3 Phoenix and FLOW3 - April 2012

TYPO3 Phoenix The new new new TypoScript rendering has been merged last month, and the various sites in production have been updated as needed. History management and link handling have been tweaked,…

TYPO3 v11 LTS—Warp Speed

Web technologies evolve at an incredible speed. So does TYPO3—the open-source content management system that powers websites and applications for organizations of all sizes. From small nonprofits to…

KB Kickstarter (kb_kickstarter)

This extension allows you to easily kick start new tables for use in TYPO3. No need to edit tca.php, ext_tables.php or other weird stuff. Documentation currently on forge wiki:…

Show extension details Download ZIP of version 0.1.1

New TYPO3 tutorials

Over the course of the last few days, the Documentation Team released two tutorials as part of the official documentation: the Getting Started tutorial is the successor of the Quickstart Guide written…

TYPO3 CMS now available for Microsoft Azure

The open source content management system TYPO3 CMS is available for Microsoft Azure effective immediately. Azure customers access TYPO3 CMS on the Azure Web App Gallery for building, managing or…

European TYPO3 Conference 2013

This year’s conference will have more focus on business and companies. For that reason the conference will be taking place during the week and on a three day schedule. For the first time we offer the…

State of the Education

First, let me emphasize, that the Education Committee is a team of highly committed, professional and motivated members. And - all of them are working wholly voluntary and without any payment.…

How to write a case study

How to produce a compelling case study for TYPO3 Sign up to the next workshop Learn how to produce great case studies. Case studies employ a narrative arc backed up by real-world data to present persuasive evidence. We will tell the stories of heroes…

TYPO3 4.1.4 and 4.0.8

TYPO3 versions 4.1.4 and 4.0.8 are ready for download. They are maintenance releases of versions 4.0 and 4.1. Both versions contain only bugfixes and one low-severity security fix. The most notable…

General Assembly 2015

The General Assembly (GA) is the body with the highest authority within the Association. At this annual meeting many basic decisions are taken, online elections are approved and budget decisions by…

Introducing the TYPO3 Initiative Week (T3INIT19)

As recent news announced , further development of TYPO3 CMS will focus on development through initiatives . Initiatives consist of independently working teams, driving a specific research area or…

Bookmark the T3BOARD13 registration Link right now!

association.typo3.org/activities/events/t3board13-registration-form See you on the Mountain!

Budget 2024 Ideas for Quarter 4/2024 Published — Vote Now!

On 2 August 2024, we launched the community budget process for 2024 with a call for budget ideas. The ideas are now published at talk.typo3.org , where you can review and discuss them . As a part of…

The Phoenix team reports on the Developer Days 2012

I personally feel that especially the transition between TYPO3 v4 (which is soon called v6) and FLOW3 / Phoenix really works out. At the overall Core Team Meeting before the T3DD, we recognized that…

Information Disclosure in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: September 5, 2017 Vulnerability Type: Information Disclosure Affected Versions: 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 Severity: Low Suggested CVSS v2.0:…

CSV Code Injection

Component Type: 3rd party extensions (not being part of TYPO3 default installation) Release Date: July 20, 2021 Impact: CSV Code Injection Type: Advisory Problem Description CSV code injection is an…

Visitors From the Symfony World Contribute To TYPO3 Documentation Search Frontend

You may already have read the article about the improvements to the search functionality at docs.typo3.org. However, the story of the look and feel hasn’t yet been told. It is a result of a…

Secrets and Benefits of the TYPO3 Professional Service Listing (PSL)

Those accepted and included in the Professional Services Listing have proven to be highly professional TYPO3 agencies (big or small!) and are active participants in the TYPO3 universe. If you are not…

Cross-Site Scripting in Content Preview

Component Type: TYPO3 CMS Subcomponent: Content Preview Renderer (ext:backend) Release Date: March 16, 2021 Vulnerability Type: Cross-Site Scripting Affected Versions: 10.0.0-10.4.1, 11.0.0-11.1.0…

Cross-Site Scripting in Form Framework

Component Type: TYPO3 CMS Subcomponent: Form Framework (ext:form) Release Date: March 16, 2021 Vulnerability Type: Cross-Site Scripting Affected Versions: 10.2.0-10.4.13, 11.0.0-11.1.0 Severity:…

Submit your 2017 budget application

Mike is back! Still motivated and enthusiast to be part of a great Open Source community, Mike wants to further share his ideas and knowledge in 2017. Just like him, you can download the budget…

Caching at TYPO3.org

Yesterday night we finally upgraded TYPO3.org to version 3.8.0. Because we had to clear all caches, including the indexed_search cache, the pages were rendered quite slowly in the time following.…

TYPO3 Hyphenator (xrhyphen)

Adds Hyphenation-Functions to TYPO3. To use this extension simply install it and add the static template "TYPO3 Hyphenation (xrhyphen)" to your root-page. Special thanks to the developers of the…

Show extension details Download ZIP of version 1.0.0

Cross-Site Scripting in Backend Modal Component

Component Type: TYPO3 CMS Vulnerable subcomponent: Backend modal component Release Date: December 11, 2018 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.1.0-7.6.31, 8.5.0-8.7.20 and…