Medium severity6.1NVD Advisory· Published Jan 7, 2021· Updated Jun 17, 2026

CVE-2020-24901

Description

The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.

Affected products

Krpano/Krpano Panorama Viewerdescription
Krpano/Panorama Viewerllm-fuzzy
Range: <=1.20.8

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/159477/Krpano-Panorama-Viewer-1.20.8-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000