https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:00:32 +0000 https://cve.radiocsirt.org/vuln/cve-2026-47687 <p><strong>Affected:</strong> fogproject</p> <p>FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectForm()` helper in `fogpage.class.php` renders `&lt;option&gt;` labels using raw, unescaped user input. An unauthenticated attacker who knows any registered host&#39;s MAC address can POST a malicious `sysproduct` value to `/service/inventory.php`, which is stored in the database. When an administrator opens Reports &gt; Inventory, the payload breaks out of the `&lt;option&gt;` element and executes arbitrary JavaScript in the admin&#39;s browser. Versions 1.5.10.1832 and 1.6.0-beta.2313 fix the issue.</p> <p><strong>Affected:</strong> fogproject</p> <p>FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the `selectForm()` helper in `fogpage.class.php` renders `&lt;option&gt;` labels using raw, unescaped user input. An unauthenticated attacker who knows any registered host&#39;s MAC address can POST a malicious `sysproduct` value to `/service/inventory.php`, which is stored in the database. When an administrator opens Reports &gt; Inventory, the payload breaks out of the `&lt;option&gt;` element and executes arbitrary JavaScript in the admin&#39;s browser. Versions 1.5.10.1832 and 1.6.0-beta.2313 fix the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-47687