TYPO3 News & Events Hub
What’s New & What’s Coming
Stay up to date with the latest TYPO3 news and announcements by subscribing to our RSS feed.
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
Read moreTYPO3-CORE-SA-2022-010: Cross-Site Scripting in view helper
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-008: Missing check for expiration time of password reset token for backend users
It has been discovered that TYPO3 CMS is vulnerable to broken access control.
TYPO3-CORE-SA-2022-007: User Enumeration via Response Timing
It has been discovered that TYPO3 CMS is vulnerable to information disclosure.
TYPO3-CORE-SA-2022-006: Denial of Service in Page Error Handling
It has been discovered that TYPO3 CMS is susceptible to denial of service.
Introducing a New Way to Meet TYPO3
There is a new event listing at typo3.org, where all of the titles start with “Meet TYPO3 at …”. These are external events where a person representing TYPO3 will be present.
Documentation Team—Summer Update 2022
It’s been a busy summer in the northern hemisphere and we’ve got plenty of updates to share.
TYPO3 ELTS 9.5 Will Soon Enter Its Second Year
If you need to maintain your TYPO3 9.5 installation(s) beyond September 30, 2022, you can benefit from ELTS 9.5 for up to two more years. The second year of ELTS 9.5 will start on October 1, 2022.
The Top Five Extensions Every TYPO3 Website Needs
TYPO3 is a powerful Content Management System that allows anyone to create and manage websites. However, one of the biggest challenges can be finding the right extensions for your website.