2 matches found
CVE-2020-24900: Improper Neutralization of Input During Web Page Generation
The default installation of Krpano Panorama Viewer version =1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml...
6.1CVSS5.8AI score0.00858EPSS
SaveExploits1References2
CVE-2020-24901: Improper Neutralization of Input During Web Page Generation
The default installation of Krpano Panorama Viewer version =1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugintest.url...
6.1CVSS5.8AI score0.04067EPSS
SaveExploits1References3
20