An XSS vulnerability exists in DeepSeeks AI where user input is rendered without proper sanitization. Submitting JavaScript code (e.g., <script>alert('XSS');</script>) causes it to execute in the browser. This can allow attackers to execute arbitrary scripts, potentially altering page content or performing malicious actions on users' browsers.
