Trix cross-site scripting vulnerabilities

Trix is a Basecamp open source rich text editor for everyday writing. A cross-site scripting vulnerability exists in Trix versions prior to 2.1.12, which stems from a cross-site scripting attack when malicious code is pasted into a link field...