EIP-2026-104430

This document details multiple persistent XSS vulnerabilities in SevenIT SevDesk 3.10, where malicious script code can be injected via the `firstname`, `surname`, and `family` name fields during registration. The injected payloads execute in the dashboard module, leading to session hijacking or phishing.