playSMS vulnerabilities
We track 3 vulnerabilities in playSMS products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on September 16, 2024.
Latest playSMS vulnerabilities
- 9.8 Critical severity
playSMS: Improper Control of Generation of Code
A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&inc=core_auth&route=forgot&op=forgot of the component Template Handler. The manipulation of the ar
- 8.8 High severity
playSMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=feature_firewall&op=firewall_list of the component Template Handler. The manipulatio
- 9.8 Critical severity
PlaySMS Server-Side Template Injection Exploited
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.