CVE-2026-124499

A code injection vulnerability exists in Fengoffice Feng Office versions up to 3.11.13.11/4.2.1.2 . The flaw resides in the Translation Tool component, specifically within the write_translations function of the application/controllers/ToolController.class.php file. Manipulating the lang argument ...