CVE-2025-54597 PoC — Heimdall 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54597.yaml

Associated Vulnerability

Title:Heimdall 跨站脚本漏洞 (CVE-2025-54597)
Description:Heimdall是LinuxServer.io开源的一个应用程序面板和启动器。 Heimdall 2.7.3之前版本存在跨站脚本漏洞，该漏洞源于q参数未清理，可能导致跨站脚本攻击。

Description

LinuxServer.io Heimdall < 2.7.3 contains a stored XSS caused by improper sanitization of the \"q\" parameter, letting remote attackers execute scripts, exploit requires crafted input.

File Snapshot


 id: CVE-2025-54597

info:
  name: Heimdall Application Dashboard < 2.7.3 - Reflected XSS
  author: 0

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.