CVE-2025-54597 PoC — Heimdall 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54597.yaml

Associated Vulnerability

Title:Heimdall 跨站脚本漏洞 (CVE-2025-54597)
Description:LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.

Description

LinuxServer.io Heimdall < 2.7.3 contains a stored XSS caused by improper sanitization of the \"q\" parameter, letting remote attackers execute scripts, exploit requires crafted input.

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →