CVE-2020-24901

Published: 2021-01-07T13:15Z

Last Modified: 2025-04-03T15:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt