Vulnerabilities

TI-2025-40892 CVE-2025-66460

Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables

LOW 23

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00202 Published 2025-12-02 Fixed in 1.35.3 CWE-79

TI-2025-40891 CVE-2025-66459

LOW 24

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00331 Published 2025-12-02 Fixed in 1.35.3 CWE-79

TI-2025-40890 CVE-2025-66458

LOW 23

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00202 Published 2025-12-02 Fixed in 1.35.3 CWE-79