XSS in Lookyloo
CVE-2026-66824
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data c…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Lookyloo — versions 0