krpano records
3 published records for vendor krpano.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
25Monitor | CVE-2020-24901No exploit | The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file vikrpano · krpano · CWE-79 | Medium6.1 | — | 4.1% | Jan 7, 2021 |
24Monitor | CVE-2020-24900Proof of concept | The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpankrpano · krpano · CWE-79 | Medium6.1 | — | 1.2% | Jan 7, 2021 |
24Monitor | CVE-2025-65892No exploit | Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScrikrpano · krpano · CWE-79 | Medium6.1 | — | 0.2% | Nov 29, 2025 |
- CVE-2020-2490125Monitor
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file vi
MediumCVSS 6.1No exploitEPSS 4%krpano · krpanoJan 7, 2021
- CVE-2020-2490024Monitor
The default installation of Krpano Panorama Viewer version <=1.20.8 is prone to Reflected XSS due to insecure XML load in file /viewer/krpan
MediumCVSS 6.1Proof of conceptEPSS 1%krpano · krpanoJan 7, 2021
- CVE-2025-6589224Monitor
Reflected Cross-Site Scripting (rXSS) in krpano before version 1.23.2 allows a remote unauthenticated attacker to execute arbitrary JavaScri
MediumCVSS 6.1No exploitEPSS 0%krpano · krpanoNov 29, 2025