GHSA-3432-fmrf-7vmh
Chrome PHP is missing encoding in `CssSelector`
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | chrome-php/chrome | < 1.14.0 | 1.14.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
CSS Selector expressions are not properly encoded, which can lead to XSS (cross-site scripting) vulnerabilities.
### Patches
This is patched in v1.14.0.
### Workarounds
Users can apply encoding manually to their selectors, if they are unable to upgrade.
References
External links from the advisory. They lead to third-party sites.