Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ail framework — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in ail framework, with AI-generated Chinese analysis, references, and POCs.

Vendor: ail project

CVE ID Title CVSS Severity Published
CVE-2026-100190 Stored Cross-Site Scripting (XSS) via Crawler Capture Import in AIL Framework showDomain Page CWE-79 6.3 Medium 2026-09-25
CVE-2026-100187 AIL Framework Onion Module: Non-Onion URL Accepted as Crawler Task Due to Bypassed Domain Validation CWE-20 6.9 Medium 2026-09-25
CVE-2026-100177 Ail Framework Crawler: Missing Cookiejar Authorization Check Allows Cross-Organization Cookiejar Attachment CWE-639 6.3 Medium 2026-09-25
CVE-2026-100176 Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip CWE-79 8.5 High 2026-09-25
CVE-2026-100174 Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names CWE-79 5.1 Medium 2026-09-25
CVE-2026-100172 Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes CWE-79 8.5 High 2026-09-25
CVE-2026-56450 AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Against Two-Factor Authentication Codes CWE-307 - - 2026-06-22
CVE-2026-56448 Authenticated Path Traversal in AIL Framework Investigation Downloads Allows Arbitrary File Read CWE-22 - - 2026-06-22

All 8 known CVE vulnerabilities affecting ail framework with full Chinese analysis, references, and POCs where available.