CVE-2026-46516

Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter "assets/js/chat.js"'s "formatMarkdown" inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that refle...