CVE-2026-8901: Unauthenticated Stored XSS in Freshsales Plugin (CVSS 7.2)

CVE-2026-8901 is a CVSS 7.2 unauthenticated stored XSS in Integration for Freshsales ≤1.0.15. A crafted form entry runs JavaScript in the admin's browser.