CVE-2025-57203: MagicProject AI · Cross-site Scripting
Source CVE Database V5
Not known to be exploited · CVSS 4.8 Medium.
Data as of 26 Oct 2026, 11:07 UTC
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 14% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 22 Sep 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Immediately apply patches or updates from the vendor once available. In the absence of official patches, implement strict input validation and sanitization on the 'prompt' parameter to block HTML and JavaScript injection.
- Employ output encoding techniques (e.g., HTML entity encoding) when rendering user-supplied content to prevent script execution.
- Configure and enforce a strong Content Security Policy (CSP) that restricts inline scripts and only allows trusted script sources, mitigating the impact of any injected scripts.
- Limit administrative access strictly to trusted personnel and enforce multi-factor authentication to reduce the risk of credential compromise.
- Monitor logs and user activity for suspicious behavior related to the chatbot generation feature.
- Conduct security awareness training for admins to recognize phishing or social engineering attempts that could lead to credential theft.
- Consider implementing web application firewalls (WAF) with rules to detect and block XSS payloads targeting the vulnerable endpoint.
- Regularly review and audit the application’s code and third-party components for similar input validation weaknesses.
Description
MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a multipart/form-data POST request. Due to insufficient input sanitization, attackers can inject HTML-based JavaScript payloads. This payload is stored and rendered unsanitized in subsequent views, leading to execution in other users' browsers when they access affected content. This issue allows an authenticated attacker to execute arbitrary JavaScript in the context of another user, potentially leading to session hijacking, privilege escalation, data exfiltration, or administrative account takeover. The application does not implement a Content Security Policy (CSP) or adequate input filtering to prevent such attacks. A fix should include proper sanitization, output encoding, and strong CSP enforcement to mitigate exploitation.