Advisories · Technology
lookyloo.
Every CVE that names lookyloo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Lookyloo: Potential sub-system DoS due to parameter missmatch in notification
- lookyloo
- CWE-233
- CVSS 6.9 Medium
Zip Bomb in Lookyloo Capture Upload Allows Denial of Service
- lookyloo
- Denial of service
- CVSS 9.2 CriticalCritical · CVSS 9+
Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding
- lookyloo
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables
- lookyloo
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML
- lookyloo
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Lookyloo has multiple XSS due to unsafe use of f-strings in Markup
- lookyloo
- Cross-site scripting (XSS)
- CVSS 9.4 CriticalCritical · CVSS 9+
Lookyloo is vulnerable due to improper user input sanitization
- lookyloo
- Cross-site scripting (XSS)