Update wp-ambience-xss.yaml

2022-08-10 14:50:05 +05:30 · 2022-08-10 14:50:05 +05:30 · 0ba0e74aa1
parent 0bbe2ff881
commit 0ba0e74aa1
1 changed files with 4 additions and 2 deletions
--- a/vulnerabilities/wordpress/wp-ambience-xss.yaml
+++ b/vulnerabilities/wordpress/wp-ambience-xss.yaml
@ -4,10 +4,12 @@ info:
  name: WordPress Theme Ambience <= 1.0 - Cross-Site Scripting (XSS)
  author: daffainfo
  severity: medium
+  description: |
+    The ambience WordPress theme was affected by a Cross-Site Scripting (XSS) security vulnerability.
  reference:
    - https://www.exploit-db.com/exploits/38568
    - https://wpscan.com/vulnerability/c465e5c1-fe43-40e9-894a-97b8ac462381
-  tags: wordpress,xss,wp-plugin
+  tags: wordpress,xss,wp-plugin,wp

 requests:
  - method: GET
@ -17,9 +19,9 @@ requests:
    matchers-condition: and
    matchers:
      - type: word
+        part: body
        words:
          - "<body onload=alert(1)>"
-        part: body

      - type: word
        part: header