EIP-2026-108850

This exploit demonstrates a stored XSS vulnerability in the RSMonials Joomla component, allowing an attacker to inject malicious JavaScript that executes when an administrator views the testimonials page. The PoC includes two examples: one for remote file upload and another for creating a new super administrator account.