EIP-2026-112223

This exploit demonstrates a stored XSS vulnerability in Small CRM 3.0 by injecting a JavaScript payload into the 'description' field of a ticket creation form. The payload is executed when the ticket is viewed, allowing arbitrary script execution in the context of the user's session.