2 Days ago we have just released playSMS version 0.9.7 (lots of changes since 0.9.6, you should read). But since I found something serious, I thought it won’t matter if I just release another one. Next time I will provide a patch instead of releasing whole new version when changes are not much, even when they’re important.
Security bug has been fixed in this release. The bug allows a non-admin user to upload a CSV file with username field filled with other user’s username and playSMS allows the process to continue.
This release is a security release. It is highly recommended for users to download and use this version immediately.