medium4.3
CVE-2025-7672
The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS.
Impact
The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS. This issue affects CrossEditor4: from 4.0.0.01 before 4.6.0.23.
Affected products
| Product | Affected versions |
|---|---|
| CrossEditor4: From 4.0.0.01 | before 4.6.0.23. |
Versions were read from the advisory text. No structured product data has been published for this record yet.