| Package | Affected versions | Patched versions |
|---|---|---|
| krpano | ≤ 1.20.8 |
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free