minor matcher update
parent
3f66b769c1
commit
22ab0f9d53
|
@ -1,7 +1,7 @@
|
|||
id: CVE-2021-25075
|
||||
|
||||
info:
|
||||
name: Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS
|
||||
name: WordPress Duplicate Page or Post < 1.5.1 - Stored XSS
|
||||
author: DhiyaneshDK
|
||||
severity: low
|
||||
description: |
|
||||
|
@ -10,12 +10,12 @@ info:
|
|||
reference:
|
||||
- https://wpscan.com/vulnerability/db5a0431-af4d-45b7-be4e-36b6c90a601b
|
||||
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25075
|
||||
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
|
||||
cvss-score: 3.50
|
||||
cve-id: CVE-2021-25075
|
||||
cwe-id: CWE-862
|
||||
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
|
@ -48,6 +48,7 @@ requests:
|
|||
words:
|
||||
- "style=animation-name:rotation onanimationstart=alert(/XSS/) p"
|
||||
- "toplevel_page_wpda_duplicate_post_menu"
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
id: seo-redirection-xss
|
||||
|
||||
info:
|
||||
name: SEO Redirection < 7.4 - Reflected Cross-Site Scripting
|
||||
name: WordPress SEO Redirection < 7.4 - Reflected Cross-Site Scripting
|
||||
author: DhiyaneshDK
|
||||
severity: medium
|
||||
description: |
|
||||
|
@ -42,6 +42,7 @@ requests:
|
|||
words:
|
||||
- "</script><svg/onload=alert(/XSS/)>"
|
||||
- "settings_page_seo-redirection"
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
|
|
Loading…
Reference in New Issue