---
title: "Discussion on \"CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution\" | Hashnode"
description: "Discussion on \"CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution\". Discovered by: Michael Kim & Sergio MedeirosVendor: LiquidThemesProduct: MagicAI (a.k.a. MagicProject AI)Affected version: 9.1 (other versions untested)Impact: Arbitrary JavaScript execution in users’ browsers (stored XSS)Attack type: Authenticated r..."
url: "https://hashnode.com/posts/cve-2025-57203-stored-xss-in-magicai-91-ai-chat-enables-arbitrary-javascript-execution/68cf087e97f73695b24a4578"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution](https://grumpz.net/cve-2025-57203-stored-xss-in-magicai-91-ai-chat-enables-arbitrary-javascript-execution?utm_source=hashnode&utm_medium=feed)

Discovered by: Michael Kim & Sergio MedeirosVendor: LiquidThemesProduct: MagicAI (a.k.a. MagicProject AI)Affected version: 9.1 (other versions untested)Impact: Arbitrary JavaScript execution in users’ browsers (stored XSS)Attack type: Authenticated r...

Sep 20, 2025 · 7 min read · grumpz.net  
Read the article

-   [#cve](https://hashnode.com/tag/cve)
-   [#bugbounty](https://hashnode.com/tag/bugbounty)
-   [#hacking](https://hashnode.com/tag/hacking)
-   [#cybersecurity-1](https://hashnode.com/tag/cybersecurity-1)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#hacker](https://hashnode.com/tag/hacker)
-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#bugs-and-errors](https://hashnode.com/tag/bugs-and-errors)
-   [#xss](https://hashnode.com/tag/xss)
-   [#php](https://hashnode.com/tag/php)
-   [#developer](https://hashnode.com/tag/developer)

## Written by

[Sergio Medeiros](https://hashnode.com/@grumpz)

@grumpz · San Jose, CA USA

  
[View profile](https://hashnode.com/@grumpz)

Vulnerability Operations @ Synack. InfoSec's Village Idiot. Documenting my journey of pivoting out of a decade long sales career to breaking

| Vulnerability Operations @ Synack | Bug Bounty Hunter. Security Researcher. Wannabe hacker, sharing my thoughts on how to be successful in the cyber security space, after pivoting careers of being a decade long Sales Director.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.