CVE-2026-73428

Trix (rich-text editor) prior to version 2.1.18 is vulnerable to stored XSS when crafted HTML is pasted into the editor. The HTMLParser handles a mock attachment in a with an empty data-trix-attachment="{}"; this causes data-trix-attributes to apply to plain text and allows an unvalidated href i...