Heads first into a new year - January 2012

After an exciting 2011 we have meanwhile completed the first month of 2012. Just like probably everyone else we have some ideas for doing things better than in the past, and this includes…

CSV Code Injection

Component Type: 3rd party extensions (not being part of TYPO3 default installation) Release Date: July 20, 2021 Impact: CSV Code Injection Type: Advisory Problem Description CSV code injection is an…

Secrets and Benefits of the TYPO3 Professional Service Listing (PSL)

Those accepted and included in the Professional Services Listing have proven to be highly professional TYPO3 agencies (big or small!) and are active participants in the TYPO3 universe. If you are not…

Budget 2024 Ideas for Quarter 4/2024 Published — Vote Now!

On 2 August 2024, we launched the community budget process for 2024 with a call for budget ideas. The ideas are now published at talk.typo3.org , where you can review and discuss them . As a part of…

TYPO3 Phoenix and FLOW3 - April 2012

TYPO3 Phoenix The new new new TypoScript rendering has been merged last month, and the various sites in production have been updated as needed. History management and link handling have been tweaked,…

Information Disclosure in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: September 5, 2017 Vulnerability Type: Information Disclosure Affected Versions: 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 Severity: Low Suggested CVSS v2.0:…

Press releases and articles Year-end report 2014

The press team and the PR agency Fink & Fuchs worked in 2014 together to create and publish some news in 2014. This is our list of press releases, interviews and articles in print magazines: official…

PS3 Trophys (ps3trophys)

Manage PS3 Trophys in TYPO3.

Show extension details Download ZIP of version 0.1.2

typo3.org code sprint starting

The participants from the typo3.org code sprint are getting ready as I write this to travel to Wiesbaden again for the fourth code sprint to improve our information hub typo3.org. Most will be…

Cross-Site Scripting in Content Preview

Component Type: TYPO3 CMS Subcomponent: Content Preview Renderer (ext:backend) Release Date: March 16, 2021 Vulnerability Type: Cross-Site Scripting Affected Versions: 10.0.0-10.4.1, 11.0.0-11.1.0…

Cross-Site Scripting in Form Framework

Component Type: TYPO3 CMS Subcomponent: Form Framework (ext:form) Release Date: March 16, 2021 Vulnerability Type: Cross-Site Scripting Affected Versions: 10.2.0-10.4.13, 11.0.0-11.1.0 Severity:…

Introducing the TYPO3 Initiative Week (T3INIT19)

As recent news announced , further development of TYPO3 CMS will focus on development through initiatives . Initiatives consist of independently working teams, driving a specific research area or…

Cross-Site Scripting in Backend Modal Component

Component Type: TYPO3 CMS Vulnerable subcomponent: Backend modal component Release Date: December 11, 2018 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.1.0-7.6.31, 8.5.0-8.7.20 and…

The new frontend editing for TYPO3

For us as TYPO3 Core team, Frontend Editing plays an important part for the ease-of-use for TYPO3. It adds a missing piece which has been neglected for too long. On the other hand, the source code of…

Insufficient Session Expiration in Admin Tool

Component Type: TYPO3 CMS Subcomponent: Admin Tool (ext:install) Release Date: June 14, 2022 Vulnerability Type: Broken Access Control Affected Versions: 9.0.0-9.5.34 ELTS, 10.0.0-10.4.28,…

Cross-Site Scripting in Form Engine

Component Type: TYPO3 CMS Subcomponent: Form Engine (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1 Severity: Medium…

Sensitive Data Exposure in extension "Job Fair" (jobfair)

Release Date: May 12, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Job Fair (ext:jobfair) Vulnerability Type: Sensitive Data…

Content Blocks on the Road Towards TYPO3 v13 — Report Q1/2024

Content Blocks — Say Hello to a Ton of New Features Many last-minute features made it in. Now the focus will shift to TYPO3 version 13. We’ll pause development of additional features for now, but of…

if20 Templates for TYPO3 (if_yaml)

TypoScript library for TYPO3, Template with tons of examples.

Show extension details Download ZIP of version 1.6.0 Extension documentation

Submit your 2017 budget application

Mike is back! Still motivated and enthusiast to be part of a great Open Source community, Mike wants to further share his ideas and knowledge in 2017. Just like him, you can download the budget…

TYPO3 in the Cloud – User Group meets Microsoft

Topics of the meeting are TYPO3 in the cloud with Microsoft Azure and Platform.sh, the Microsoft Cloud Germany and the new Form Framework in TYPO3 8.5. Microsoft and open source Microsoft has…

General Assembly 2015

The General Assembly (GA) is the body with the highest authority within the Association. At this annual meeting many basic decisions are taken, online elections are approved and budget decisions by…

This Month in TYPO3

This is where we request your help! When you see interesting blog articles or other news regarding TYPO3, extensions, implementations, tutorials, snippets, or what else might fit, please let us know.…

The Phoenix team reports on the Developer Days 2012

I personally feel that especially the transition between TYPO3 v4 (which is soon called v6) and FLOW3 / Phoenix really works out. At the overall Core Team Meeting before the T3DD, we recognized that…

Steering Committee Strategical Meeting

Strategy Benni tells about the past User eXperience Week (T3UXW09) and how much work can be done during such a week. We will definitely repeat these 'code sprints'. We will keep aiming TYPO3 as “The…