CVE-2025-7672

The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS. This issue affects CrossEditor4: from 4.0.0.01 before 4.6.0.23.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - 09832df1-09c1-45b4-8a85-16c601d30feb

Published

2025-07-15

Last modified

2025-07-15

Weaknesses

CWE-276, CWE-79

Affected products

• Crosseditor4 (Jiransoft)

References

• https://www.namoeditor.co.kr/crosseditor-summary