EIP-2026-111324

This exploit demonstrates a CSRF vulnerability in PlaySMS <= 0.9.9.2, allowing an attacker to change user preferences, including passwords, by tricking a victim into visiting a malicious webpage. The lack of security tokens in the application enables this attack.