CVE-2025-57203

{
  "id": "CVE-2025-57203",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-22T20:15:38.483",
  "lastModified": "2026-11-05T23:10:00.150",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a multipart/form-data POST request. Due to insufficient input sanitization, attackers can inject HTML-based JavaScript payloads. This payload is stored and rendered unsanitized in subsequent views, leading to execution in other users' browsers when they access affected content. This issue allows an authenticated attacker to execute arbitrary JavaScript in the context of another user, potentially leading to session hijacking, privilege escalation, data exfiltration, or administrative account takeover. The application does not implement a Content Security Policy (CSP) or adequate input filtering to prevent such attacks. A fix should include proper sanitization, output encoding, and strong CSP enforcement to mitigate exploitation."
    },
    {
      "lang": "es",
      "value": "MagicProject AI versión 9.1 está afectado por una vulnerabilidad de cross-site scripting (XSS) dentro de la función de generación de chatbots disponible para usuarios administradores autenticados. La vulnerabilidad reside en el parámetro prompt enviado al endpoint /dashboard/user/generator/generate-stream a través de una solicitud POST multipart/form-data. Debido a una sanitización de entrada insuficiente, los atacantes pueden inyectar cargas útiles de JavaScript basadas en HTML. Esta carga útil se almacena y se renderiza sin sanitizar en vistas posteriores, lo que lleva a la ejecución en los navegadores de otros usuarios cuando acceden al contenido afectado. Este problema permite a un atacante autenticado ejecutar JavaScript arbitrario en el contexto de otro usuario, lo que podría llevar al secuestro de sesión, escalada de privilegios, exfiltración de datos o toma de control de cuentas administrativas. La aplicación no implementa una Política de Seguridad de Contenido (CSP) o un filtrado de entrada adecuado para prevenir tales ataques. Una solución debería incluir sanitización adecuada, codificación de salida y una fuerte aplicación de CSP para mitigar la explotación."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
          "baseScore": 4.8,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.7,
        "impactScore": 2.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-24T19:06:35.440243Z",
          "id": "CVE-2025-57203",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:liquidlabs:magicai:9.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "0EA99D0C-6272-4523-BB86-92D3990E8DA1"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://codecanyon.net/item/magicai-openai-content-text-image-chat-code-generator-as-saas/45408109",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}