While there is no patch for it yet. I advise you hosting company's to disable your WHMCS till a patch is released. Localhost has released another exploit. Have a great day people. I hope you get this message. Regards, Mike
They are on this one already http://blog.whmcs.com/?t=80587 but luckily you can disable mass payments to prevent any issues