CVE-2026-46512 Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escaping

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, fmdialplanapply accepted template parameters including greeting, dest, url, extension, code, and file, and Tools/DialplanApply.php wrote Dialplan/Templates.php output to extensionscustom.conf while only...

CVE-2026-46512

Frogman (headless PBX control) before v1.6.2 allowed fm_dialplan_apply to interpolate template parameters (greeting, dest, url, extension, code, file) into Dialplan/Templates.php output that could be written to extensions_custom.conf. In Dialplan/TemplateBase.php, insufficient sanitization of con...