CVE-2025-46812

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojmngd3y2 2025-05-08 20:23:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15617 2025-05-08...

CVE-2025-46812 Trix vulnerable to Cross-site Scripting on copy & paste

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the...

CVE-2025-46812

CVE-2025-46812 affects the Trix rich-text editor. Versions before 2.1.15 are vulnerable to XSS when pasting malicious content, enabling execution of arbitrary JavaScript in the user session; this could lead to unauthorized actions or data disclosure. The issue is patched in version 2.1.15. Remedi...

org.webjars.bower:angular-trix (1.0.2), org.webjars.bower:github-com-sachinchoolur-angular-trix (1.0.2) potentially affected by CVE-2025-46812 via org.webjars.bower:trix (0.9.9)

org.webjars.bower:trix MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bower:trix and may be impacted: - org.webjars.bower:angular-trix 1.0.2 - org.webjars.bower:github-com-sachinchoolur-angular-trix 1.0.2 Source cves:...