Threat Investigation
Request a demo

CVE-2025-7672

Medium

Description

The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS. This issue affects CrossEditor4: from 4.0.0.01 before 4.6.0.23.

SeverityMedium
CVSS4.3
Exploit probability—
ProductCrossEditor4
PublishedJul 15, 2025
First seenJul 15, 2025
Weakness typeCWE-79Cross-site scripting (XSS)CWE-276CWE-276

How to fix

Update
  • JiranSoft CrossEditor44.6.0.23 or later

Affected products

ProductAffected versionsFixed in
JiranSoft CrossEditor44.0.0.01 ≤ v < 4.6.0.234.6.0.23

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.