All 5 CVE vulnerabilities found in trix, with AI-generated Chinese analysis, references, and POCs.
Vendor: basecamp
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-46812 | Trix vulnerable to Cross-site Scripting on copy & paste CWE-79 | 6.1AI | MediumAI | 2025-05-08 |
| CVE-2025-21610 | Trix allows Cross-site Scripting via `javascript:` url in a link CWE-79 | 5.3 | Medium | 2025-01-03 |
| CVE-2024-53847 | Trix vulnerable to Cross-site Scripting on copy & paste CWE-79 | 6.1 | - | 2024-12-09 |
| CVE-2024-43368 | Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste CWE-79 | 6.5 | Medium | 2024-08-14 |
| CVE-2024-34341 | The Trix Editor Contains an Arbitrary Code Execution Vulnerability CWE-79 | 5.4 | Medium | 2024-05-07 |
All 5 known CVE vulnerabilities affecting trix with full Chinese analysis, references, and POCs where available.