3 matches found
CVE-2020-24900: Improper Neutralization of Input During Web Page Generation
The default installation of Krpano Panorama Viewer version =1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml...
CVE-2020-24901: Improper Neutralization of Input During Web Page Generation
The default installation of Krpano Panorama Viewer version =1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugintest.url...
PT-2021-11079
Name of the Vulnerable Software and Affected Versions: Krpano Panorama Viewer versions =1.20.8 Description: The default installation of Krpano Panorama Viewer is prone to Reflected XSS due to insecure XML load in the file /viewer/krpano.html, specifically the xml parameter. Recommendations: For...