Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-7672 EUVD-2025-21418GHSA-mmfv-hxf9-3r5f

Stored-XSS possibility in Namo CrossEditor4

Published Jul 15, 2025 · Updated Jul 15, 2025 · Assigned by FSI

Description

The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS.
This issue affects CrossEditor4: from 4.0.0.01 before 4.6.0.23.

Affected products

VendorProductAffectedFixed
JiranSoft CrossEditor4 4.0.0.01 – < 4.6.0.23 4.6.0.23

References