EIP-2026-104255

The advisory describes an information disclosure vulnerability in FreePBX 2.5.x where administrator passwords are exposed in the HTML source code of the admin panel. The proof of concept demonstrates how an authenticated user can view other administrators' passwords by inspecting the page source.