<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: playsms</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-8880: A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7</title><link>https://patchthecve.com/cve/CVE-2024-8880.html</link><guid>https://patchthecve.com/cve/CVE-2024-8880.html</guid><pubDate>Wed, 17 Jun 2026 08:23:28 +0000</pubDate><description>MEDIUM 5.6: A vulnerability classified as critical has been found in playSMS 1.4.4/1.4.5/1.4.6/1.4.7. Affected is an unknown function of the file /playsms/index.php?app=main&amp;inc=core_auth&amp;route=forgot&amp;op=forgot of the component Template Handler. The manipulation of the argument username/email/captcha leads to c</description></item><item><title>CVE-2024-6470: A vulnerability was found in playSMS 1.4.3</title><link>https://patchthecve.com/cve/CVE-2024-6470.html</link><guid>https://patchthecve.com/cve/CVE-2024-6470.html</guid><pubDate>Wed, 17 Jun 2026 08:18:04 +0000</pubDate><description>LOW 2.7: A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&amp;inc=feature_inboxgroup&amp;op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input {{`id`}</description></item><item><title>CVE-2024-6469: A vulnerability was found in playSMS 1.4.3</title><link>https://patchthecve.com/cve/CVE-2024-6469.html</link><guid>https://patchthecve.com/cve/CVE-2024-6469.html</guid><pubDate>Wed, 17 Jun 2026 08:18:04 +0000</pubDate><description>LOW 2.7: A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&amp;inc=feature_firewall&amp;op=firewall_list of the component Template Handler. The manipulation of the argument IP address with the in</description></item><item><title>CVE-2024-6251: A vulnerability, which was classified as problematic, was found in playSMS 1.4.3</title><link>https://patchthecve.com/cve/CVE-2024-6251.html</link><guid>https://patchthecve.com/cve/CVE-2024-6251.html</guid><pubDate>Wed, 17 Jun 2026 08:17:37 +0000</pubDate><description>LOW 2.4: A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&amp;inc=feature_phonebook&amp;op=phonebook_list of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site scri</description></item></channel></rss>