Known vulnerabilities in Trix

Vendor: Basecamp
Software: Trix
Software CPE: cpe:2.3:a:basecamp:trix:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Trix Trix is affected by 8 known vulnerabilities: 5 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128365 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-73427
CWE-79 Medium
No
No
2.1.18 28.04.2026 SB20260428199
#VU128364 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-73426
CWE-79 Low
No
No
2.1.17 28.04.2026 SB20260428198
#VU128363 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-80 Low
No
No
2.1.16 28.04.2026 SB20260428197
#VU128362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-46812
CWE-79 Medium
No
No
2.1.15 28.04.2026 SB20260428196
#VU128359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21610
CWE-79 Medium
No
No
2.1.12 03.01.2025 SB2025010332
#VU128360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-53847
CWE-79 Medium
No
No
1.3.3, 2.1.9 09.12.2024 SB2024120964
#VU128361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43368
CWE-79 Medium
No
No
2.1.4 14.08.2024 SB2024081483
#VU89684 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34341
CWE-79 Low
No
No
1.3.2, 2.1.1 21.05.2024 SB2024052110
SB2024052111