M.O.H.A.J.A.L.I

**Name of the Vulnerable Software and Affected Versions** PlaySMS version 0.8 **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `err` parameter in the index.php file. **Recommendations** For PlaySMS version 0.8, consider restricting access to the index.php file or disabling the `err` parameter to minimize the risk of exploitation until a patch is available.