Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/25 2:17 p.m.•16 views

CVE-2026-100190

The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...

6.3CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 1:52 p.m.•25 views

CVE-2026-100190

The AIL Framework crawler splash domain page (showDomain.html ) is vulnerable to stored cross-site script injection (XSS) . The root cause is the direct interpolation of user-supplied data from imported crawler captures—specifically item IDs, URLs, and screenshot file paths —into inline JavaScrip...

6.3CVSS6AI score0.00316EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2026/09/25 1:52 p.m.•11 views

CVE-2026-100190 Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page

The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...

6.3CVSS6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 1:52 p.m.•14 views

EUVD-2026-87096

The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...

6.3CVSS6AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 1:52 p.m.•45 views

CVE-2026-100190 Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page

The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...

6.3CVSS0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•14 views

CVE-2026-100190: Improper Neutralization of Input During Web Page Generation

The AIL Framework crawler splash domain page showDomain.html is vulnerable to stored cross-site script injection XSS. User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpolated directly into inline JavaScript contexts with...

6.3CVSS6.1AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•8 views

PT-2026-98853

Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description The crawler splash domain page showDomain.html is susceptible to stored cross-site script injection XSS. This occurs because user-supplied data from imported crawler captures—specifical...

6.3CVSS5.7AI score0.00316EPSS
SaveExploits0References3
Rows per page
Query Builder