EIP-2026-112567

The exploit demonstrates a reflected XSS vulnerability in TCExam's user registration page by injecting a malicious script via the 'user_password' parameter. The payload bypasses insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.