Priority LOW 15
Campfire is a web-based chat application.
Vulnerabilities
13 records
TI-2026-51544 CVE-2026-73426 · GHSA-qmpg-8xg6-ph5q
Trix: Stored XSS vulnerability through serialized attributes
Priority LOW 21
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
TI-2026-51546 CVE-2026-73428 · GHSA-53g2-mvcc-q9x3
Trix: Stored XSS via HTMLParser attribute injection on paste
Priority LOW 21
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
TI-2026-51545 CVE-2026-73427 · GHSA-53p3-c7vp-4mcc
Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)
Priority LOW 12
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
TI-2025-35910 CVE-2025-58067 · GHSA-5jch-xhw4-r43v
Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI
Priority LOW 19
Basecamp's Google Sign-In adds Google sign-in to Rails applications.
TI-2025-35704 CVE-2025-57821 · GHSA-7pwc-wh6m-44q3
Basecamp's Google Sign-In for Rails allowed redirects to a malformed URL
Priority LOW 19
Basecamp's Google Sign-In adds Google sign-in to Rails applications.
TI-2025-29445 CVE-2025-46812 · GHSA-mcrw-746g-9q8h
Trix vulnerable to Cross-site Scripting on copy & paste
Priority LOW 18
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
TI-2025-15570 CVE-2025-21610 · GHSA-j386-3444-qgwg
Trix allows Cross-site Scripting via `javascript:` url in a link
Priority LOW 24
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
TI-2024-36043 CVE-2024-53847 · GHSA-6vx4-v2jw-qwqh
Trix vulnerable to Cross-site Scripting on copy & paste
Priority LOW 30
The Trix rich text editor, prior to versions 2.1.9 and 1.3.3, is vulnerable to cross-site scripting (XSS) + mutation XSS attacks when pasting malicious code.
TI-2024-29019 CVE-2024-43368 · GHSA-qm2q-9f3q-2vcv
Trix has a Cross-Site Scripting (XSS) vulnerability on copy & paste
Priority MEDIUM 64
The Trix editor, versions prior to 2.1.4, is vulnerable to XSS when pasting malicious code.
TI-2024-22682 CVE-2024-34341 · GHSA-qjqp-xr96-cj99
The Trix Editor Contains an Arbitrary Code Execution Vulnerability
Priority LOW 26
Trix is a rich text editor.
TI-2023-18436 CVE-2023-36612 · GHSA-97cm-f92p-p28q
Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1…
Priority HIGH 72
Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory.
TI-2018-16075 CVE-2018-1000855 · GHSA-c289-47qf-rvrr
easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in…
Priority LOW 29
easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox.