---
id: CVE-2026-100172
title: >-
  The AIL Framework (ail-project/ail-framework) contains a stored cross-site
  scripting (XSS) vulnerability in two Jinja2 templates that render popovers for
  matched, tracked, or tagged content:
  var/www/templates/chats_explorer/block_message…
summary: >-
  The AIL Framework (ail-project/ail-framework) contains a stored cross-site
  scripting (XSS) vulnerability in two Jinja2 templates that render popovers for
  matched, tracked, or tagged content:
  var/www/templates/chats_explorer/block_message…
severity: high
cvss: 8.5
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'
cwe:
  - CWE-79
vendor: ail project
product: ail framework
affected:
  - ail_framework >= unspecified < 7.1
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T16:17:24.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100172'
references:
  - url: >-
      https://github.com/ail-project/ail-framework/commit/ee63a0a96646790255e038f5ca5dd0ab5fe98db2
    label: 5a6e4751-2f3f-4070-9419-94fb35b644e8
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-25T15:15:12.313075Z'
cvssSource: cna
ingestedAt: '2026-09-25T14:09:46.372Z'
---

## Overview

The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagged content: var/www/templates/chats_explorer/block_message.html and var/www/templates/objects/item/show_item.html. In both templates, dynamic values associated with this content, including icon color, icon style, icon glyph, subtype, identifier, name, description, and matched value, are interpolated directly into the data-content HTML attribute of Bootstrap popover elements without appropriate output encoding. Because the popovers are configured with data-html="true", the content is interpreted as HTML in the victim's browser. An authenticated attacker who can influence matched, tracked, or tagged content may inject arbitrary HTML or JavaScript into these values. When a victim displays the affected popover, the injected markup may execute in the victim's session, potentially enabling data exfiltration or actions with the victim's privileges. The vulnerability is classified as stored XSS because the malicious payload can persist in the affected match, tracking, or tag-related data and be delivered to users who view the affected content.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.