Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2026/09/25 1:29 p.m.•19 views

CVE-2026-100176 Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

8.5CVSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 1:29 p.m.•12 views

CVE-2026-100176

The AIL Framework username timeline feature is vulnerable to stored cross-site scripting (XSS) . The application stores usernames from chats and crawled forums without character restrictions. When an authenticated analyst views the timeline, the client-side JavaScript file var/www/static/js/d3/ti...

8.5CVSS6AI score
SaveExploits0References1
Rows per page
Query Builder