CVE-2026-73427 | Basecamp Trix up to 2.1.17 StringPiece.fromJSON cross site scripting

August 12, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Basecamp Trix up to 2.1.17. The impacted element is the function StringPiece.fromJSON. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-73427. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More