Filtered by vendor Krpano Subscriptions
Filtered by product Krpano Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-65892 1 Krpano 1 Krpano 2025-12-01 6.1 Medium
Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the victim's browser via a crafted URL to the passQueryParameters function with the xml parameter enabled.
CVE-2020-24901 1 Krpano 1 Krpano 2025-04-03 6.1 Medium
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
CVE-2020-24900 1 Krpano 1 Krpano 2024-11-21 6.1 Medium
The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml.