Skip to content
OpenAdvisories

Vendor

mpretroff

1 known vulnerabilities.

Products

pannellum 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2019-16763

    XSS in Pannellum from 2.5.0 through 2.5.4

    In Pannellum from 2.5.0 through 2.5.4 URLs were not sanitized for data URIs (or vbscript:), allowing for potential XSS attacks. Such an attack would require a user to click on a hot spot to execute and would require an attacker-provided configuration. The mos…

    mpretroff pannellum pannellum npm