Approved changes feed: RSS · Atom

cpe:2.3:a:krpano:krpano:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKrpano (6b370117-a23c-5e8b-a05a-060f8768e936)
ProductKrpano (d8f15ec9-d50e-568a-aa99-061758044f2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-65892 vulnerable 2026-06-08 07:39:21.062943 Details available
Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the victim's browser via a crafted URL to the passQueryParameters function with the xml parameter enabled.
Published: 2025-11-29T00:00:00.000Z
Updated: 2025-12-01T14:45:07.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24901 vulnerable 2026-06-08 05:22:35.695571 Details available
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
Published: 2021-01-07T12:43:54.000Z
Updated: 2025-04-03T14:18:29.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24900 vulnerable 2026-06-08 05:22:35.694919 Details available
The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpano.html, parameter xml.
Published: 2021-01-07T12:43:36.000Z
Updated: 2024-08-04T15:19:09.347Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.