Update CVE-2021-24838

cves/2021/CVE-2021-24838.yaml

@@ -1,7 +1,7 @@
 id: CVE-2021-24838
 
 info:
-  name: AnyComment <= 0.2.21 - Open Redirect
+  name: AnyComment < 0.3.5 - Open Redirect
   author: noobexploiter
   severity: medium
   description: The plugin has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to
@@ -19,7 +19,7 @@ info:
 requests:
   - method: GET
     path:
-      - "{{BaseURL}}/wp-json/anycomment/v1/auth/wordpress?redirect=https://interact.sh"
+      - "{{BaseURL}}/wp-json/anycomment/v1/auth/wordpress?redirect=https://interact.sh?a=https://example.com"
 
     matchers-condition: and
     matchers: