AIL Project’s ail-framework has a stored cross‑site scripting flaw in the translation controls of chat messages and forum posts. The framework embeds message or post identifiers directly into JavaScript onclick handlers without proper encoding for JavaScript string literals, allowing a crafted identifier that includes quote marks or escape sequences to break out of the string and inject arbitrary JavaScript. This leads to arbitrary script execution in the victim’s browser when they click the Translate button, potentially enabling session hijacking, credential theft, or defacement. The weakness is identified as CWE‑79.

The vulnerability affects the ail-framework component of the ail-project. No specific version numbers are listed, so all releases that include the vulnerable template logic are impacted until the referenced fix commit is applied.

The CVSS v3.1 base score of 6.9 indicates a moderate severity vulnerability. Because the attack requires only a user to click the Translate button and the malicious data is already stored by the system, exploitation is simple for any authenticated or unauthenticated user who can inject a specially crafted identifier. The EPSS score is not available, and the vulnerability is not yet listed in CISA’s KEV catalog. The likely attack vector is a local or global click‑based interaction, with the injected code executing under the AIL instance’s security origin, thereby granting the attacker any privileges associated with that origin.