CVE-2026-71445

The CVE-2026-71445 entry concerns AIL Framework. It describes an authenticated reflected cross-site scripting flaw in the /tag/add_tags endpoint, where an error message is emitted directly as HTML via str(res[0]), allowing attacker-controlled input to be reflected without proper encoding. Exploit...

CVE-2026-71445 Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework

AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...

OneBlog 跨站脚本漏洞

OneBlog is a simple and beautiful , powerful and adaptive Java blog. The use of springboot development , front-end use Bootstrap. support for mobile adaptive , with a complete front-end and back-end management functions . OneBlog in version 2.2.8 before the existence of XSS vulnerability , the...