<h2>Action Required</h2><p>Your payment method needs verification. <a href="javascript:alert('XSS')">Click here</a> to verify.</p><p>This is an automated notification from Alby Hub security.</p>