minor matcher update

patch-1
sandeep 2022-05-15 04:48:52 +05:30
parent 3f66b769c1
commit 22ab0f9d53
2 changed files with 5 additions and 3 deletions

View File

@ -1,7 +1,7 @@
id: CVE-2021-25075
info:
name: Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS
name: WordPress Duplicate Page or Post < 1.5.1 - Stored XSS
author: DhiyaneshDK
severity: low
description: |
@ -10,12 +10,12 @@ info:
reference:
- https://wpscan.com/vulnerability/db5a0431-af4d-45b7-be4e-36b6c90a601b
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25075
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss-score: 3.50
cve-id: CVE-2021-25075
cwe-id: CWE-862
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
requests:
- raw:
@ -48,6 +48,7 @@ requests:
words:
- "style=animation-name:rotation onanimationstart=alert(/XSS/) p"
- "toplevel_page_wpda_duplicate_post_menu"
condition: and
- type: word
part: header

View File

@ -1,7 +1,7 @@
id: seo-redirection-xss
info:
name: SEO Redirection < 7.4 - Reflected Cross-Site Scripting
name: WordPress SEO Redirection < 7.4 - Reflected Cross-Site Scripting
author: DhiyaneshDK
severity: medium
description: |
@ -42,6 +42,7 @@ requests:
words:
- "</script><svg/onload=alert(/XSS/)>"
- "settings_page_seo-redirection"
condition: and
- type: word
part: header