Home/CVEs/CVE-2020-8644/

CVE-2020-8644 - PlaySMS Server-Side Template Injection Vulnerability

Project:PlaySMS

Product:PlaySMS

Date Added:2021-11-03Due Date:2022-05-03

Vulnerability Name

PlaySMS Server-Side Template Injection Vulnerability

Description

PlaySMS contains a server-side template injection vulnerability that allows for remote code execution.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-8644