Magicai
1 CVEs
product
Monthly
MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
XSS
Magicai
NVD
CVSS 3.1
4.8
EPSS
0.0%
CVE-2025-57203
EPSS 0%
CVSS 4.8
MEDIUM
Monitor
MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
XSS
Magicai
NVD