CVE-2025-54597

CVE-2025-54597 affects LinuxServer.io Heimdall prior to 2.7.3. A cross-site scripting (XSS) vulnerability is triggered via the query parameter q in the web UI, due to an uncleared input. Impact is described as XSS with potential user impact on affected deployments; exploitation details are not pr...