Search for packages
| purl | pkg:composer/chrome-php/chrome@0.3.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-unvh-pcha-kuh4
Aliases: CVE-2025-48883 GHSA-3432-fmrf-7vmh |
Chrome PHP allows users to start playing with chrome/chromium in headless mode from PHP. Prior to version 1.14.0, CSS Selector expressions are not properly encoded, which can lead to XSS (cross-site scripting) vulnerabilities. This is patched in v1.14.0. As a workaround, users can apply encoding manually to their selectors if they are unable to upgrade. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T20:02:43.736264+00:00 | GitLab Importer | Affected by | VCID-unvh-pcha-kuh4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/chrome-php/chrome/CVE-2025-48883.yml | 38.6.0 |