TYPO3 News & Events Hub
What’s New & What’s Coming
Upcoming elections in the TYPO3 Association
Official positions in the TYPO3 Association have a tenure of office of 2 years. Each year half of the positions are newly elected. In 2015 the following positions are up for election:
Read moreThis Week in TYPO3 (2015, Week 3)
TYPO3 sprints are planned and happening, news on TYPO3 Flow and Neos, an overview of the T3A in 2014 and the next generation of TYPO3 with T3rookies.
[UPDATE] TYPO3 CMS Code Sprints 2015
The TYPO3 CMS codesprint schedule for 2015 is finally here. Before we get to the dates let us get you up to date on what’s new.
This Week in TYPO3 (2015, Week 2)
The TYPO3 project eases into 2015 with sprints being set up for the year lying ahead of us. A year that will see the release of TYPO3 CMS 7 LTS, TYPO3 Neos 1.3 and TYPO3 Flow 3.0. We have a report on the editorial sprint, several goodies AND Paul is...
TYPO3 SnowBoard Tour 2015
The TYPO3 SnowBoard Tour 2015 takes place in Saalbach Hinterglemm, Austria from Saturday 7th of February to Saturday 14th of February 2015. You can still join!!
First Learning Unit Sprint A Big Success
Report from the first sprint of the Education Committee's Learning Unit Task Force
Information Disclosure in Direct Mail Subscription (direct_mail_subscription)
It has been discovered that the extension "Direct Mail Subscription" (direct_mail_subscription) is susceptible to Information Disclosure.
December’s diary of the TYPO3 Association
A look back into the work of the TYPO3 Association in 2014
Multiple vulnerabilities in Content Rating Extbase (content_rating_extbase)
It has been discovered that the extension "Content Rating Extbase" (content_rating_extbase) is susceptible to Cross-Site Scripting and SQL Injection.
Multiple vulnerabilities in Content Rating (content_rating)
It has been discovered that the extension "Content Rating" (content_rating) is susceptible to Cross-Site Scripting and SQL Injection.
Improper Authentication in LDAP / SSO Authentication (ig_ldap_sso_auth)
It has been discovered that the extension "LDAP / SSO Authentication" (ig_ldap_sso_auth) is susceptible to Improper Authentication.
This Week in TYPO3 (Week 50)
In this last This Week in TYPO3 of 2014, Neos 1.2 overview, interview with Mattes, TYPO3 Little Helper, FAL code sprint, What's New Slides and Go Mobile.
Community Insight: Mathias "Mattes" Schreiber
Mathias Schreiber is Product Owner for TYPO3 CMS 7 and he has been around in the TYPO3 community for as long as I have. He is one of the owners of wmdb Systems GmbH, Düsseldorf. Mattes, as he is usually called, was present at a number of initiatives...
Press releases and articles Year-end report 2014
This year was amazing. A lot of good stuff happened in the TYPO3 universe.
TYPO3 CMS 7.1 - Focused on cleaning the house
With the launch of an all-new 7.0 release, the TYPO3 community is already actively developing the next version in the CMS7 release cycle. Let's dive in the current status and have a look on the next release.
This Week in TYPO3 (Week 49)
Week 49 was full of energy and expectation. A first version of TYPO3 CMS 7 was released building up towards the Long Term Support release at the end of 2015. The big Neos sprint spawns its third beta on the way the TYPO3 Neos 1.2. Word from the...
Second TYPO3Camp in Poland and why you cannot miss it next year
The second TYPO3Camp in Poland took place on November 21 - 22 at the School of Humanities and Journalism in Pozna?. Agata Pi?niak, office manager at Macopedia, writes about the event.
Cross-Site Scripting vulnerability in wfGallery (wf_gallery)
It has been discovered that the extension "wfGallery" (wf_gallery) is susceptible to Cross-Site Scripting.
Multiple vulnerabilities in BibTex Publications (si_bibtex)
It has been discovered that the extension "BibTex Publications" (si_bibtex) is susceptible to Cross-Site Scripting and SQL Injection.
Multiple vulnerabilities in Drag Drop Mass Upload (ameos_dragndropupload)
It has been discovered that the extension "Drag Drop Mass Upload" (ameos_dragndropupload) is susceptible to Cross-Site Scripting, Cross-Site Request Forgery and Improper Access Control.