CVE-2025-57203 Cross-site scripting in n/a
Authenticated attackers can inject JavaScript into chatbot prompts, leading to session hijacking and account takeover for other users.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-57203?
CVE-2025-57203 is a medium-severity cross-site scripting vulnerability in n/a, published on 22 Sep 2025. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a multipart/form-data POST request. Due to insufficient input sanitization, attackers can inject HTML-based JavaScript payloads. This payload is stored and rendered unsanitized in subsequent views, leading to execution in other users' browsers when they access affected content. This issue allows an authenticated attacker to execute arbitrary JavaScript in the context of another user, potentially leading to session hijacking, privilege escalation, data exfiltration, or administrative account takeover. The application does not implement a Content Security Policy (CSP) or adequate input filtering to prevent such attacks. A fix should include proper sanitization, output encoding, and strong CSP enforcement to mitigate exploitation.
Weakness: CWE-79
Which versions are affected by CVE-2025-57203?
It affects 1 product.
Products include Liquidlabs Magicai.
How do I fix CVE-2025-57203?
No fix has been published for CVE-2025-57203 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2025-57203 being exploited?
There is no known exploitation of CVE-2025-57203 in the wild and no public exploit code.
Sources
Also known as GHSA-p549-v45c-9xxx.