Description
The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a custom tag could embed an HTML payload containing JavaScript event handlers (e.g., <img src=x onerror=alert(1)> or <svg onload=...>) in the tag name. When another authenticated user opened a page containing the tag selector, the malicious tag name was inserted into the DOM using jQuery's html property, causing the embedded script to execute in the victim's browser context.

The vulnerable code paths affected both the suggestion/combo-item rendering (_renderComboItems) and the selected-tag rendering logic. In both cases, the display value derived from the tag's displayField was passed directly to the html property of a jQuery element constructor, which parses and inserts the string as raw HTML rather than as text.

Preconditions: the attacker must have an authenticated account with permission to create custom tags, and the victim must be an authenticated user who views a page that renders the tag selector with the attacker's stored tag. The attack is stored (persistent) and does not require the victim to perform any action beyond loading the page.

Security impact: successful exploitation allows arbitrary JavaScript execution in the victim's browser within the application's origin, potentially leading to session hijacking, unauthorized data access, form manipulation, or further client-side attacks.
Published: 2026-09-25
Score: 5.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary JavaScript execution via stored XSS
Action: Patch Immediately
AI Analysis

Impact

The AIL Framework tag selector processes tag names without escaping, allowing a user with permission to create custom tags to embed script-containing HTML. When another authenticated user opens a page that renders the selector, the unsanitized tag name is inserted into the page with jQuery’s html method, resulting in JavaScript execution in the victim’s browser under the application origin. This can lead to session hijacking, data theft, form injection, and other client‑side attacks.

Affected Systems

AIL Framework, version prior to the fix referenced by commit b2d0ed0. The vulnerability arises in the JS component var/www/static/js/tags.js in the tag selector module. All deployed instances shipping this code are affected. No specific version numbers are listed, so any release containing the unpatched tags.js file is vulnerable.

Risk and Exploitability

The CVSS score is 5.1, indicating moderate impact. No EPSS score exists, and the vulnerability is not in CISA’s KEV catalog. The attack is stored; it requires the attacker to have an authenticated account able to create custom tags and a victim who is also authenticated and views a page with the tag selector. The vulnerability is exploitable in the browser context and does not require the victim to perform a special action beyond loading the page.

Generated by OpenCVE AI on September 25, 2026 at 16:43 UTC.

Remediation

Vendor Solution

The fix ensures that tag names and display values are rendered as plain text rather than as HTML when no custom renderer is explicitly configured. In the suggestion rendering path, the default (non-renderer) case now uses jQuery's .text() method, which HTML-escapes the content. In the selection rendering path, the default case uses document.createTextNode() to insert the value as a text node. Custom renderers, which are developer-supplied and trusted to produce safe HTML, continue to use .html() or .prepend() with raw HTML. The eval() call was also replaced with JSON.parse() to eliminate a code-injection vector.

OpenCVE Recommended Actions

  • Upgrade to the AIL Framework version that includes the patch referenced in the commit b2d0ed0, which escapes tag names using .text() and document.createTextNode() and replaces eval with JSON.parse.
  • If upgrading is not immediately possible, limit tag creation permissions to administrators or disable the custom tag feature until a fix is applied.
  • Apply the recommended default rendering changes: ensure all tag names and display values are output as plain text instead of raw HTML in both suggestion and selected-tag rendering paths.

Generated by OpenCVE AI on September 25, 2026 at 16:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 26 Sep 2026 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Ail-project
Ail-project ail-framework
Vendors & Products Ail-project
Ail-project ail-framework

Fri, 25 Sep 2026 13:45:00 +0000

Type Values Removed Values Added
Description The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a custom tag could embed an HTML payload containing JavaScript event handlers (e.g., <img src=x onerror=alert(1)> or <svg onload=...>) in the tag name. When another authenticated user opened a page containing the tag selector, the malicious tag name was inserted into the DOM using jQuery's html property, causing the embedded script to execute in the victim's browser context. The vulnerable code paths affected both the suggestion/combo-item rendering (_renderComboItems) and the selected-tag rendering logic. In both cases, the display value derived from the tag's displayField was passed directly to the html property of a jQuery element constructor, which parses and inserts the string as raw HTML rather than as text. Preconditions: the attacker must have an authenticated account with permission to create custom tags, and the victim must be an authenticated user who views a page that renders the tag selector with the attacker's stored tag. The attack is stored (persistent) and does not require the victim to perform any action beyond loading the page. Security impact: successful exploitation allows arbitrary JavaScript execution in the victim's browser within the application's origin, potentially leading to session hijacking, unauthorized data access, form manipulation, or further client-side attacks.
Title Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names
Weaknesses CWE-79
CWE-94
References
Metrics cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N'}

Subscriptions

Ail-project Ail-framework
cve-icon MITRE

Status: PUBLISHED

Assigner: CIRCL

Published:

Updated: 2026-09-25T15:14:51.969Z

Reserved: 2026-09-25T13:22:15.197Z

Link: CVE-2026-100174

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-09-25T14:17:16.783

Modified: 2026-09-25T16:17:24.433

Link: CVE-2026-100174

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T12:30:07Z

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')