system
Describe <CVE-2020-24901>.
user
What is <CVE-2020-24901>?
assistant
The default installation of Krpano Panorama Viewer version <=1.20.8 is vulnerable to Reflected XSS due to insecure remote js load in file viewer/krpano.html, parameter plugin[test].url..