TYPO3 News & Events Hub
What’s New & What’s Coming
Report from the Board QSA—April 2020
The TYPO3 Association Board met online Monday and Tuesday 20–21 April, 2020. The topics included preparing the General Assembly, visions for the TYPO3 Company and Supervisory Board elections, as well as reviewing the budget, member management,...
Read moreBenefits of TYPO3 v10 LTS for Business Users
TYPO3 — Top 10 reasons to use the open source enterprise CMS Here’s how new features in TYPO3 v10 LTS improve user experience, performance, and security.
TYPO3 v6.2.49, 7.6.42 and 8.7.33 ELTS Released
Still sticking to an older version of TYPO3? There may be good reasons for doing so. Today, TYPO3 v6.2.49, 7.6.42 and 8.7.33 ELTS have been released. Staying on top of maintenance and security updates should be a top priority - Gain peace of mind by...
Same-Origin Request Forgery to Backend User Interface
It has been discovered that TYPO3 CMS is vulnerable to same-origin request forgery.
Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer)
It has been discovered that the extension "SVG Sanitizer" (svg_sanitizer) is vulnerable to Cross-Site Scripting.
Class destructors causing side-effects when being unserialized
It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization.
Cross-Site Scripting in Link Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
Sensitive Data Exposure in extension "Job Fair" (jobfair)
It has been discovered that the extension "Job Fair" (jobfair) is susceptible to Sensitive Data Exposure.
Cross-Site Scripting in Form Engine
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
Broken Access Control in extension "gForum" (g_forum)
It has been discovered that the extension "gForum" (g_forum) is susceptible to Broken Access Control.
Information Disclosure in Password Reset
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
Multiple vulnerabilities in extension "Direct Mail" (direct_mail)
It has been discovered that the extension "Direct Mail" (direct_mail) is susceptible to Denial of Service, Broken Access Control, Open Redirect and Information Disclosure.
TYPO3 10.4.2 and 9.5.17 security releases published
The versions 10.4.2 and 9.5.17 of the TYPO3 Enterprise Content Management System have just been released.
SQL Injection in extension "phpMyAdmin" (phpmyadmin)
It has been discovered that the extension "phpMyAdmin" (phpmyadmin) is susceptible to SQL Injection.
CMS-Learning Curriculum for Educators and Students
SkillDisplay announces ready-to-use curriculum to help students learn about content management.
April 2020: Developer Appreciation Day (DAD)
Now that May is in the starting blocks, let’s recap on the achievements of the last month. As we look back, we find a great deal of contributions to the TYPO3 Project. Learn more details in our Developer Appreciation Day post!
TYPO3 v10 Maintenance Release Schedule
TYPO3 v10 LTS receives a plannable release schedule for upcoming maintenance releases, as we did since TYPO3 v7 already. This makes it transparent for everybody in the TYPO3 Community to know when to expect a next bugfix and maintenance release.
Publish More Content, in More Languages, Faster, Within TYPO3
Digital communication is fundamental to the modern customer journey – and a crucial part of that journey is your website. The LanguageWire TYPO3 Connector makes it possible to manage translations from within your TYPO3 CMS improving your content ROI...
TYPO3 10.4.1 and 9.5.16 maintenance releases published
The versions 10.4.1 and 9.5.16 of the TYPO3 Enterprise Content Management System have just been released.
The Importance of Service Level Agreements (SLA)
Software has become an essential part of any business today, and so it’s also a key factor in creating greater Return on Investment (ROI). If you want to secure your website’s value, there’s no getting round contracting with professionals for a...