high7.2
CVE-2025-54597
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
Impact
LinuxServer.io Heimdall before 2.7.3 allows XSS via the q parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linuxserver | Heimdall Application Dashboard | before 2.7.3 |