PHPGurukul Small CRM version 3.0 contains a Cross Site Scripting (XSS) vulnerability in the aremark parameter of the manage-tickets.php script. This vulnerability allows an attacker to inject malicious scripts that could be executed in the context of a user's browser session. The vulnerability has a CVSS v3.1 score of 6.1, indicating a medium severity level.