1 matches found
CVE-2026-71445: Improper Neutralization of Input During Web Page Generation
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...
8.2CVSS6AI score0.00396EPSS
SaveExploits0References2
20