EIP-2026-106527

This exploit demonstrates a stored XSS vulnerability in Dolibarr 17.0.1 via the note.php endpoint. The payload uses an onscrollend event to trigger a JavaScript alert, exploiting insufficient input sanitization.