AcySMS by Acyba, versions 3.5.0 and previous, CSV Injection (see https://vel.joomla.org/articles/2140-introducing-csv-injection )

resolution: update to 3.5.1

update notice: https://www.acyba.com/acysms/change-log.html

.