Vulnerabilities

TI-2025-40504 CVE-2025-65892 · GHSA-q82r-57vj-xrfh

Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote…

LOW 27

Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the victim's browser via a crafted URL to the passQueryParameters function…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00251 Published 2025-11-29 No fix listed CWE-79

TI-2020-15232 CVE-2020-24901 · GHSA-7hmr-qxwq-qpx6

The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to…

LOW 34

The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04117 Published 2021-01-07 No fix listed CWE-79

TI-2020-15231 CVE-2020-24900 · GHSA-rp6f-x899-cqm4

The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected…

LOW 30

The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01231 Published 2021-01-07 No fix listed CWE-79

Vulnerabilities

Filters

Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote…

The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to…

The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected…