EIP-2026-111327

This Metasploit module exploits a pre-authentication server-side template injection vulnerability in PlaySMS before version 1.4.3, leading to remote code execution via a malicious payload in the username field.