N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-3432-fmrf-7vmh

GHSA-3432-fmrf-7vmh: Chrome PHP is missing encoding in `CssSelector`

Impact

CSS Selector expressions are not properly encoded, which can lead to XSS (cross-site scripting) vulnerabilities.

Patches

This is patched in v1.14.0.

Workarounds

Users can apply encoding manually to their selectors, if they are unable to upgrade.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-3432-fmrf-7vmh

GHSA-3432-fmrf-7vmh:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
chrome-php/chrome	composer	< 1.14.0	1.14.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the CssSelector class within the chrome-php/chrome package. Specifically, the __construct method was accepting a CSS selector expression as a string and storing it without any sanitization or encoding. This raw expression was then used by the expressionCount and expressionFindOne methods to construct JavaScript code that would be executed in a browser context (likely via a WebDriver or similar interface).

The lack of encoding meant that if a user-supplied CSS selector contained malicious characters (e.g., "-alert(1)-"), these characters would be directly embedded into the JavaScript string, leading to a cross-site scripting (XSS) vulnerability. An attacker could potentially craft a CSS selector that, when processed by these methods, would execute arbitrary JavaScript in the context of the page being interacted with.

The patch addresses this by using json_encode with appropriate flags (JSON_UNESCAPED_SLASHES, JSON_UNESCAPED_UNICODE, JSON_THROW_ON_ERROR) in the __construct method to ensure the selector is safely encoded before being used in JavaScript contexts. The expressionCount and expressionFindOne methods were updated to use this new encoded property (expressionEncoded) instead of the raw input.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.