35
CVE-2020-24901
PoC —CVSS 3.1
6.1 medium
EPSS
1%p61
Published
()
Modified
Description
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
- Vendors
- krpano
- Products
- krpano
- Weakness
- CWE-79
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N