medium6.1
CVE-2020-24901
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, p…
Impact
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Krpano | Krpano | through 1.20.8 |