Vulnerability in canine project #480
Description
While working on canine project, I identified a stored Cross-Site Scripting (XSS) vulnerability in the Trix editor package. The issue occurs due to improper sanitization of the data-trix-attachment attribute. Malicious JavaScript can be injected into stored editor content and later executed when the attachment is rendered or interacted with, affecting users who view the content.