A PHP Object Injection vulnerability exists in FV Flowplayer Video Player versions up to and including 8.3.4. This vulnerability allows a user with shop manager privileges to potentially execute arbitrary code or cause other impacts by injecting crafted PHP objects.