EIP-2026-108069

This advisory details a Cross-Site Scripting (XSS) vulnerability in jBilling 3.0.2, where malicious iframe tags can be injected via the 'notes' section in order creation or the 'description' field in customer details. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a victim's session.