Typo3 Extension "Html5 Video Player Vs. Powermail" vulnerabilities

1 vulnerability

Known vulnerabilities in Typo3 Extension "Html5 Video Player Vs. Powermail", newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2026-77138typo3 · extension "html5 video player vs. powermail"Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server.CVSS9.3CriticalEPSS0.72%