CVE-2022-47968

Summary: CVE-2022-47968 affects Heimdall Application Dashboard up to version 2.5.4, with a reflected and stored XSS in the "Application name" on the Add application page; the stored payload is then visible/triggers on the Application list page. What is affected: Heimdall Application Dashboard (ve...

CVE-2025-54597

CVE-2025-54597 affects LinuxServer.io Heimdall prior to 2.7.3. A cross-site scripting (XSS) vulnerability is triggered via the query parameter q in the web UI, due to an uncleared input. Impact is described as XSS with potential user impact on affected deployments; exploitation details are not pr...