Medium severity6.1NVD Advisory· Published Jan 7, 2021· Updated Jun 17, 2026

CVE-2020-24900

Description

The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Krpano/Krpano Panorama Viewerdescription
Krpano/Panorama Viewerllm-fuzzy
Range: <=1.20.8

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/159477/Krpano-Panorama-Viewer-1.20.8-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000