XSS in Ail-project Ail-framework
CVE-2026-71445
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using str(…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Ail-project Ail-framework — versions 0