EIP-2026-107041

This exploit demonstrates a stored XSS vulnerability in Family Connections CMS 2.3.2 via the 'subject' parameter in messageboard.php and an XPath injection in getChat.php via the 'message' parameter. The PoC includes HTML forms to trigger both vulnerabilities.