The AIL Framework stores usernames imported from chats and forums without any character restrictions, allowing an attacker to insert arbitrary HTML and JavaScript. When an authenticated analyst views the timeline, the framework renders these usernames into a tooltip using D3's html() method, injecting the raw value directly into the DOM. Hovering over a malicious entry causes the embedded script to run in the analyst's browser, which can hijack the session, exfiltrate data, or perform unauthorized actions within the analyst's authenticated context. The flaw resides in var/www/static/js/d3/timeline_basic.js and is a classic stored cross‑site scripting vulnerability.

The issue affects the AIL Framework, as distributed by the ail project. All versions that include the unpatched 'timeline_basic.js' module are vulnerable. No specific version numbers are listed in the CNA data, so apply updates whenever available.

The vulnerability scores a CVSS of 8.5, indicating high severity. The EPSS score is not available, but the KEV catalog does not list it, meaning there are no publicly known active exploits yet. The attack requires that the victim be an authenticated analyst and that they interact with the malicious timeline entry, making the attack vector a user-interaction with a web page, but it is still considered a high risk due to the potential for complete session compromise.