Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrew Norcross Google Earth Embed google-earth-tours allows Stored XSS.This issue affects Google Earth Embed: from n/a through <= 1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Andrew Norcross | Google Earth Embed | ≤ 1.0 | — |