CVE-2022-47968

5.4 mediumEPSS 0.4%

Medium (5.4) in linuxserver heimdall application dashboard. EPSS 0.4% chance of exploitation in the next 30 days.

Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The stored XSS will be triggered in the "Application list" page.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-12-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linuxserver:heimdall_application_dashboard

References

https://github.com/linuxserver/Heimdall/issues/1086
https://samy.link/blog
https://github.com/linuxserver/Heimdall/issues/1086
https://samy.link/blog

Check your stack JSON