Skip to content
OpenAdvisories

Vendor

Lookyloo

11 known vulnerabilities.

Products

lookyloo 7 PlaywrightCapture 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-66824

    Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding

    A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values der…

    Lookyloo lookyloo
  • Critical 9.4
    CVE-2025-65095

    Lookyloo is vulnerable due to improper user input sanitization

    Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.…

    Lookyloo lookyloo