Description
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
Medium · 6.1
CVE-2020-24901
EUVD-2020-17609GHSA-7hmr-qxwq-qpx6
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file v…
Published Jan 7, 2021 · Updated Apr 3, 2025 · Assigned by mitre