Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2025/09/24 12:28 a.m.•27 views

CVE-2025-57203

MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...

4.8CVSS6.2AI score0.00237EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/22 8:15 p.m.•13 views

CVE-2025-57203

MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...

4.8CVSS6.2AI score0.00237EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-57203: Improper Neutralization of Input During Web Page Generation

MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...

4.8CVSS6.4AI score0.00237EPSS
SaveExploits1References1
Rows per page
Query Builder