CVE-2025-26210

DeepSeek versions 1.0 through 3.1 are vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This allows an attacker to execute arbitrary JavaScript in the context of the run-html-chat.deepseeksvc.com domain, potentially leading to arbitrary c...