CyberRota Analysis
AI-GeneratedThe Trix rich text editor is vulnerable to stored cross-site scripting (XSS) due to improper handling of pasted HTML content, specifically when a crafted attachment is processed. This flaw allows an attacker to inject malicious JavaScript into the document model, which can execute when another user interacts with the content. Developers utilizing Trix versions prior to 2.1.18 should prioritize updating to the fixed version to mitigate potential XSS attacks in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a `<span>` with an empty `data-trix-attachment="{}"` value, causing data-trix-attributes to be applied to a plain string piece. StringPiece.fromJSON accepts an unvalidated href, allowing a javascript: URI to enter the document model and serialized HTML and execute when another user renders and clicks the content. Applications that apply server-side HTML sanitization can neutralize the payload on save. This issue is fixed in version 2.1.18.