EIP-2026-111396

This exploit demonstrates a stored XSS vulnerability in Police Crime Record Management System 1.0 by injecting malicious JavaScript payloads into the 'Firstname' or 'Othernames' fields during staff addition. The payload executes when the page is updated, confirming the vulnerability.