---
id: CVE-2026-100174
title: >-
  The AIL Framework tag selector component (var/www/static/js/tags.js) is
  vulnerable to stored cross-site scripting (XSS)
summary: >-
  The AIL Framework tag selector component (var/www/static/js/tags.js) is
  vulnerable to stored cross-site scripting (XSS). A user with the ability to
  create a custom tag could embed an HTML payload containing JavaScript event
  handlers (e.g…
severity: medium
cvss: 5.1
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N'
cwe:
  - CWE-79
  - CWE-94
vendor: ail project
product: ail framework
affected:
  - ail_framework < 7.1
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T16:17:24.433'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100174'
references:
  - url: >-
      https://github.com/ail-project/ail-framework/commit/b2d0ed05f6cf79b2312a3f1f923d0d1a5d7a9edb
    label: 5a6e4751-2f3f-4070-9419-94fb35b644e8
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-25T15:14:24.607198Z'
cvssSource: cna
ingestedAt: '2026-09-25T14:09:46.372Z'
---

## Overview

The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a custom tag could embed an HTML payload containing JavaScript event handlers (e.g., <img src=x onerror=alert(1)> or <svg onload=...>) in the tag name. When another authenticated user opened a page containing the tag selector, the malicious tag name was inserted into the DOM using jQuery's html property, causing the embedded script to execute in the victim's browser context.

The vulnerable code paths affected both the suggestion/combo-item rendering (_renderComboItems) and the selected-tag rendering logic. In both cases, the display value derived from the tag's displayField was passed directly to the html property of a jQuery element constructor, which parses and inserts the string as raw HTML rather than as text.

Preconditions: the attacker must have an authenticated account with permission to create custom tags, and the victim must be an authenticated user who views a page that renders the tag selector with the attacker's stored tag. The attack is stored (persistent) and does not require the victim to perform any action beyond loading the page.

Security impact: successful exploitation allows arbitrary JavaScript execution in the victim's browser within the application's origin, potentially leading to session hijacking, unauthorized data access, form manipulation, or further client-side attacks.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.