Description
The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagged content: var/www/templates/chats_explorer/block_message.html and var/www/templates/objects/item/show_item.html. In both templates, dynamic values associated with this content, including icon color, icon style, icon glyph, subtype, identifier, name, description, and matched value, are interpolated directly into the data-content HTML attribute of Bootstrap popover elements without appropriate output encoding. Because the popovers are configured with data-html="true", the content is interpreted as HTML in the victim's browser. An authenticated attacker who can influence matched, tracked, or tagged content may inject arbitrary HTML or JavaScript into these values. When a victim displays the affected popover, the injected markup may execute in the victim's session, potentially enabling data exfiltration or actions with the victim's privileges. The vulnerability is classified as stored XSS because the malicious payload can persist in the affected match, tracking, or tag-related data and be delivered to users who view the affected content.
Published: 2026-09-25
Score: 8.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Stored Cross‑Site Scripting
Action: Apply Patch
AI Analysis

Impact

This vulnerability in the AIL Framework allows a web application user who can influence content associated with matches, tags, or tracking to store malicious HTML or JavaScript in model fields. When another authenticated user displays the affected popover, the injected code is interpreted by the browser and runs in the victim’s session, which can lead to data theft or actions performed with the victim’s privileges. The weakness is a classic stored XSS (CWE‑79) because the payload persists in the database until displayed to a user.

Affected Systems

The flaw resides in the AIL Framework (ail-project/ail-framework), specifically the Jinja2 templates for popover elements in block_message.html and show_item.html. The affected product is the AIL Framework web application; no specific version range is provided in the data, so all versions prior to the disclosed fix are potentially vulnerable.

Risk and Exploitability

The vulnerability has a CVSS score of 8.5, indicating high severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, so the known exploitation probability is unknown. Exploitation requires an authenticated user with the ability to create or modify the relevant content; an attacker who can do so can embed harmful scripts that will execute for any user who views the corresponding popover.

Generated by OpenCVE AI on September 25, 2026 at 17:20 UTC.

Remediation

Vendor Solution

The fix applies double HTML-escaping (Jinja2 forceescape|forceescape) to every dynamic value interpolated into the HTML-enabled data-content attribute of the popover elements in both templates. Double-escaping is required because the values must survive both the outer HTML attribute context and the inner HTML parsing performed by the popover plugin. This neutralizes any HTML or script injection from the extracted-match fields.

OpenCVE Recommended Actions

  • Apply the vendor’s patch that implements double HTML escaping on all dynamic values inserted into data-content attributes of popover elements.
  • Limit write permissions for creating or editing content associated with matches, tags, or tracking to trusted users to reduce the risk of accidental or malicious injection while a fix is deployed.
  • Replace or temporarily remove the data-html='true' setting in the Bootstrap popover configuration until the patch is applied to prevent the browser from interpreting injected markup.

Generated by OpenCVE AI on September 25, 2026 at 17:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 26 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
First Time appeared Ail-project
Ail-project ail-framework
Vendors & Products Ail-project
Ail-project ail-framework

Fri, 25 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Description The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagged content: var/www/templates/chats_explorer/block_message.html and var/www/templates/objects/item/show_item.html. In both templates, dynamic values associated with this content, including icon color, icon style, icon glyph, subtype, identifier, name, description, and matched value, are interpolated directly into the data-content HTML attribute of Bootstrap popover elements without appropriate output encoding. Because the popovers are configured with data-html="true", the content is interpreted as HTML in the victim's browser. An authenticated attacker who can influence matched, tracked, or tagged content may inject arbitrary HTML or JavaScript into these values. When a victim displays the affected popover, the injected markup may execute in the victim's session, potentially enabling data exfiltration or actions with the victim's privileges. The vulnerability is classified as stored XSS because the malicious payload can persist in the affected match, tracking, or tag-related data and be delivered to users who view the affected content.
Title Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes
Weaknesses CWE-79
References
Metrics cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Ail-project Ail-framework
cve-icon MITRE

Status: PUBLISHED

Assigner: CIRCL

Published:

Updated: 2026-09-25T15:19:12.598Z

Reserved: 2026-09-25T13:13:52.747Z

Link: CVE-2026-100172

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-09-25T14:17:15.353

Modified: 2026-09-25T16:17:24.227

Link: CVE-2026-100172

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T13:00:14Z

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')