krpano 安全漏洞

krpano is a VR media production and display software toolset from the Austrian company krpano. A security vulnerability exists in krpano versions prior to 1.23.2, which stems from improper handling of the passQueryParameters function and could lead to a reflective cross-site scripting attack...