The vulnerability of the TPL template implementation in the web interface for SMS gateways and PlaySMS’ SMS messaging services allows a perpetrator to execute arbitrary code.

The vulnerability of the TPL template implementation src/Playsms/Tpl.php:compile in the web interface for SMS gateways and PlaySMS’s SMS messaging services is related to insufficient cleaning of special string elements. Exploiting this vulnerability could allow an attacker operating remotely to...