CVE-2026-71446

Name of the Vulnerable Software and Affected Versions AIL Framework (affected versions not specified)

Description A stored cross-site scripting issue exists in the crawler domain view. The application embeds crawled URLs directly into a JavaScript onclick handler used to display stored screenshots without proper encoding. An attacker can record a specially crafted URL in the crawler history to inject JavaScript syntax. When an authenticated analyst clicks the screenshot icon for the malicious URL, the script executes within the analyst's browser session. This could allow the attacker to access session information, modify content, or perform actions using the analyst's privileges. Exploitation requires the victim to interact with the affected screenshot entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.