EIP-2026-105916

This exploit demonstrates a stored XSS vulnerability in Client Management System 1.1 by injecting a malicious script into the username field, which executes when the profile is updated. The PoC provides clear steps to reproduce the issue.