HeadlessEasy Linux box leveraging blind XSS in a contact form and a command injection for shell and PrivEsc.