-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| codeigniter/framework | composer | < 3.0.3 | 3.0.3 |
Miggo AIRoot Cause AnalysisThe vulnerability explicitly references the xss_clean() method as the flawed component. The commit diff shows critical changes to the _sanitize_naughty_html() helper (called by xss_clean()), which originally used a flawed regex pattern and attribute iteration logic. However, since xss_clean() is the public-facing sanitization method that orchestrated this process, it is the primary vulnerable function. The tests in Security_test.php confirm the pre-patch behavior allowed dangerous attributes to persist, further implicating xss_clean().