EIP-2026-112084

This exploit demonstrates a stored XSS vulnerability in Simple CRM 3.0 via the 'name' parameter in profile.php. The PoC shows how an authenticated attacker can inject malicious JavaScript to steal administrator cookies.