CVE-2025-65754

This PoC demonstrates a stored XSS vulnerability in Algernon 1.17.4, where filenames are not properly sanitized before being rendered in directory listings. The exploit involves creating files with malicious names containing XSS payloads, which execute when accessed via the web interface.