The AIL Framework's tag selector component (var/www/static/js/tags.js) is vulnerable to stored XSS due to improper neutralization of input during web page generation. Specifically, the displayField value of custom tags is inserted directly into the DOM using jQuery's html property in both suggestion/combo-item rendering and selected-tag rendering logic. An attacker with an authenticated account and permission to create tags can embed HTML payloads with JavaScript event handlers in tag names. When a victim user views a page containing the malicious tag, the embedded script executes in their browser context without requiring any interaction beyond page load.

Successful exploitation allows arbitrary JavaScript execution in the victim's browser within the application's origin. This can lead to session hijacking, unauthorized access to sensitive data, manipulation of forms, and further client-side attacks. The vulnerability requires the attacker to have an authenticated account with tag creation permissions and the victim to be authenticated and view the affected page. The attack is persistent (stored) and does not require victim interaction beyond loading the page.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict permissions to create custom tags to trusted users only and consider implementing input sanitization or escaping for tag names before insertion into the DOM. Avoid using jQuery's html property with untrusted input; use text insertion methods instead.