EIP-2026-105841

This exploit demonstrates a stored XSS vulnerability in Church Management System 1.0 via the 'amount' and 'trcode' parameters in Tithes.php. The payload injects a malicious script that triggers an alert when rendered.