Add RosarioSIS 6.7.2 Reflected XSS template

[jarvis-survives]

PR Information

• Added template for RosarioSIS 6.7.2 Reflected XSS vulnerability
• The tab parameter in Modules.php (Preferences module) is not sanitized, allowing reflected XSS via crafted URL
• References: https://github.com/RosarioSIS/rosern/issues/4348 and https://www.exploit-db.com/exploits/52019
• Closes RosarioSIS 6.7.2 - Cross Site Scripting (XSS) #14869

Template validation

• Template follows nuclei-templates format guidelines
• Matchers verify both XSS payload reflection AND RosarioSIS presence to avoid false positives
• Uses alert(document.domain) instead of alert(1) per best practices