WordPress HTML5 Video Player with Playlist plugin Multiple XSS Vulnerabilities

WordPress HTML5 Video Player with Playlist Plugin is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2014-4534

Multiple cross-site scripting XSS vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 theme or 2 playlistmod parameter...

CVE-2014-4534

The CVE-2014-4534 entry covers multiple XSS vulnerabilities in the WordPress plugin “HTML5 Video Player with Playlist” (versions up to and including 2.4.0). Vulnerable component: videoplayer/autoplay.php; attacker can inject arbitrary script/HTML via the (1) theme or (2) playlistmod parameter. Im...

TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014...