CVE-2025-65095

Critical

Published: 19/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Lookyloo prior to version 1.35.1 has potential cross-site scripting on index and tree pages. This issue has been patched in version 1.35.1.

Risk Assessment

An attacker can inject malicious scripts, potentially leading to session theft or account takeover.

Recommendation

Upgrade Lookyloo to version 1.35.1 or later.

Original NVD description (English source)

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1.