CVE-2026-47689

FOGProject prior to versions 1.5.10.1832 and 1.6.0-beta.2313 is vulnerable to stored XSS. The buildRow() function in fogpage.class.php inserts data into HTML templates via str_replace() without escaping. An unauthenticated attacker who knows a registered host’s MAC address can POST malicious inve...