EIP-2026-104513

The exploit demonstrates two vulnerabilities in Zendesk: a Cross-Site Scripting (XSS) vulnerability in the email address field of the anonymous_requests page and a Cross-Site Request Forgery (CSRF) vulnerability in the user creation form. Both vulnerabilities are proven with functional proof-of-concept code.