VYPR

MagicProject AI

by MagicProject AI

CVEs (1)

  • CVE-2025-57203MedSep 22, 2025
    risk 0.31cvss 4.8epss 0.00

    MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream…