CVE-2020-24901: Improper Neutralization of Input During Web Page Generation

The default installation of Krpano Panorama Viewer version =1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugintest.url...

PT-2021-11079

Name of the Vulnerable Software and Affected Versions: Krpano Panorama Viewer versions =1.20.8 Description: The default installation of Krpano Panorama Viewer is prone to Reflected XSS due to insecure XML load in the file /viewer/krpano.html, specifically the xml parameter. Recommendations: For...