7 matches found
CVE-2026-100190
The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...
CVE-2026-100190
The AIL Framework crawler splash domain page (showDomain.html ) is vulnerable to stored cross-site script injection (XSS) . The root cause is the direct interpolation of user-supplied data from imported crawler captures—specifically item IDs, URLs, and screenshot file paths —into inline JavaScrip...
CVE-2026-100190 Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page
The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...
EUVD-2026-87096
The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...
CVE-2026-100190 Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page
The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...
CVE-2026-100190: Improper Neutralization of Input During Web Page Generation
The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...
PT-2026-98853
Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description The crawler splash domain page showDomain.html is susceptible to stored cross-site script injection XSS. This occurs because user-supplied data from imported crawler captures—specifical...