EIP-2026-107043

This exploit demonstrates a stored XSS vulnerability in Family Connections CMS 2.3.2 via the 'subject' POST parameter in messageboard.php and an XML injection vulnerability in /inc/getChat.php via the 'message' POST parameter. The PoC provides clickable links to trigger both vulnerabilities.