Cross site scripting

2021-01-0713:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

44.9%

JSON

The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml.

CPENameOperatorVersion
krpanole1.20.8

CPE	Name	Operator	Version
	krpano	le	1.20.8

References

packetstormsecurity.com/files/159477/Krpano-Panorama-Viewer-1.20.8-Cross-Site-Scripting.html

0.001 Low

EPSS

Percentile

44.9%

JSON

Related for PRION:CVE-2020-24900