Description

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user's session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. This issue has been patched in version 2.1.15.

INFO

Published Date :

2025-05-08T19:27:22.573Z

Last Modified :

2025-05-08T20:00:42.604Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-46812 vulnerability.

Vendors Products
Basecamp
  • Trix
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-46812.

URL Resource
https://github.com/basecamp/trix/commit/75226089646841b0f774d8b152e5ec27d2d9e191 cve-icon cve-icon
https://github.com/basecamp/trix/security/advisories/GHSA-mcrw-746g-9q8h cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability