TYPO3-EXT-SA-2014-009: Cross-Site Scripting in news
It has been discovered that the extension "News system" (news) is susceptible to Cross-Site Scripting
Read moreMeet TYPO3 at OpenExpo Day in Madrid
TYPO3 will be present as Sponsor at the OpenExpo Day in Madrid, on June 26th, 2014.
TYPO3-EXT-SA-2014-008: Cross-Site Scripting in gridelements
It has been discovered that the extension "Grid Elements" (gridelements) is susceptible to Cross-Site Scripting
TYPO3-CORE-SA-2014-001: Multiple Vulnerabilities in TYPO3 CMS
It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Insecure Unserialize, Improper Session Invalidation, Authentication Bypass, Information Disclosure and Host Spoofing.
TYPO3 CMS 4.5.34, 4.7.19, 6.0.14, 6.1.9 and 6.2.3 released
The TYPO3 Community announces the versions 4.5.34, 4.7.19, 6.0.14, 6.1.9 and 6.2.3 of the TYPO3 Enterprise Content Management System.
TYPO3-EXT-SA-2014-007: Arbitrary code execution in extension "powermail" (powermail)
It has been discovered that the extension "powermail" (powermail) is susceptible to arbitrary code execution and Cross-Site Scripting
This Week in TYPO3 (Week 20, 2014)
Extreme activity levels in week 20. Reports on meetings, code sprints, a FLOW package, some TYPO3 CMS extensions worth mentioning and documentation that needs YOUR help.
Going for one last round
I have been leading the Documentation Team for several years and am planning to resign at the end of 2014.
T3DD14: Schedule and speakers online
The schedule and speakers for the TYPO3 Developer Days are online and offer a wider range of topics than ever before.
This Week in TYPO3 (Week 19, 2014)
TYPO3 was present at LinuxTag and as usual we have upcoming events to bring to your attention.