Vendors / basecamp Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now basecamp records in CISA KEV No basecamp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0107 · Published 2023-06-25 · No fix listed CWE-22
Priority MEDIUM 64
The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when pasting malicious code.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00517 · Published 2024-08-14 · Fixed in 2.1.4 CWE-79
Priority LOW 30
The Trix rich text editor, prior to versions 2.1.9 and 1.3.3, is vulnerable to cross-site scripting (XSS) + mutation XSS attacks when pasting malicious code.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00463 · Published 2024-12-09 · Fixed in 2.1.9, 1.3.3 CWE-79
Priority LOW 29
easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00896 · Published 2018-12-20 · Fixed in 1.4.1 CWE-79
Priority LOW 26
Trix is a rich text editor.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00784 · Published 2024-05-07 · Fixed in 2.1.1, 1.3.2 +2 CWE-79
Priority LOW 24
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
CVSS 3.1 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00421 · Published 2025-01-03 · Fixed in 2.1.12 CWE-79
Priority LOW 21
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
CVSS 3.1 MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00353 · Published 2026-08-13 · Fixed in 2.1.18 CWE-79
Priority LOW 21
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
CVSS 3.1 MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.0032 · Published 2026-08-18 · Fixed in 2.1.17 CWE-79
Priority LOW 19
Basecamp's Google Sign-In adds Google sign-in to Rails applications.
CVSS 3.1 MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.00235 · Published 2025-08-29 · Fixed in 1.3.1 CWE-601
Priority LOW 19
Basecamp's Google Sign-In adds Google sign-in to Rails applications.
CVSS 3.1 MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.0025 · Published 2025-08-27 · Fixed in 1.3.0 CWE-601
Priority LOW 18
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
CVSS 4.0 LOW 2.0· Network · No auth · User interaction · EPSS 0.00716 · Published 2025-05-08 · Fixed in 2.1.15 CWE-79
Priority LOW 15
Campfire is a web-based chat application.
CVSS 3.1 LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00279 · Published 2026-10-30 · Fixed in 1.4.5 CWE-918
Priority LOW 12
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
CVSS 4.0 LOW 2.1· Network · No auth · User interaction · EPSS 0.00575 · Published 2026-08-12 · Fixed in 2.1.18 CWE-79
Open these records in search → All records by CVSS severity
0 1 9 3 0
THREATIST.IORead the docs