What’s Vulnerable › Products

basecamp trix vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your basecamp trix version is affected

Latest basecamp trix vulnerabilities

• CVE-2026-73426 — Trix: Stored XSS vulnerability through serialized attributes (CVSS 4.6)
• CVE-2026-73428 — Trix: Stored XSS via HTMLParser attribute injection on paste (CVSS 4.6)
• CVE-2026-73427 — Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController) (CVSS 2.1)
• CVE-2025-46812 — Trix vulnerable to Cross-site Scripting on copy & paste (CVSS 2.0)
• CVE-2025-21610 — Trix allows Cross-site Scripting via `javascript:` url in a link (CVSS 5.3)
• CVE-2024-53847 — Trix vulnerable to Cross-site Scripting on copy & paste (CVSS 5.1)
• CVE-2024-43368 — Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste (CVSS 6.5)
• CVE-2024-34341 — The Trix Editor Contains an Arbitrary Code Execution Vulnerability (CVSS 5.4)