EIP-2026-104256

This advisory details a permanent XSS vulnerability in FreePBX 2.5.x and 2.6.0 due to insufficient input sanitization in the Inbound Route description field. The writeup includes a proof of concept, impact analysis, and vendor response timeline.