Vulnerabilities in basecamp
11 resultsCVE-2024-34341MEDIUMThe Trix Editor Contains an Arbitrary Code Execution VulnerabilityEPSS 0.8%CVE-2025-46812LOWTrix vulnerable to Cross-site Scripting on copy & pasteEPSS 0.7%CVE-2026-73427LOWTrix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)EPSS 0.6%CVE-2024-43368MEDIUMTrix has a Cross-Site Scripting (XSS) vulnerability on copy & pasteEPSS 0.5%CVE-2024-53847MEDIUMTrix vulnerable to Cross-site Scripting on copy & pasteEPSS 0.5%CVE-2025-21610MEDIUMTrix allows Cross-site Scripting via `javascript:` url in a linkEPSS 0.4%CVE-2026-73428MEDIUMTrix: Stored XSS via HTMLParser attribute injection on pasteEPSS 0.4%CVE-2026-73426MEDIUMTrix: Stored XSS vulnerability through serialized attributesEPSS 0.3%CVE-2026-100355LOWCampfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guardEPSS 0.3%CVE-2025-57821MEDIUMBasecamp's Google Sign-In for Rails allowed redirects to a malformed URLEPSS 0.3%CVE-2025-58067MEDIUMBasecamp's Google Sign-In for Rails allowed redirects to protocol-relative URIEPSS 0.2%