minor matcher update

patch-1
sandeep 2022-05-15 04:48:52 +05:30
parent 3f66b769c1
commit 22ab0f9d53
2 changed files with 5 additions and 3 deletions

View File

@ -1,7 +1,7 @@
id: CVE-2021-25075 id: CVE-2021-25075
info: info:
name: Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS name: WordPress Duplicate Page or Post < 1.5.1 - Stored XSS
author: DhiyaneshDK author: DhiyaneshDK
severity: low severity: low
description: | description: |
@ -10,12 +10,12 @@ info:
reference: reference:
- https://wpscan.com/vulnerability/db5a0431-af4d-45b7-be4e-36b6c90a601b - https://wpscan.com/vulnerability/db5a0431-af4d-45b7-be4e-36b6c90a601b
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25075 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25075
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
classification: classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss-score: 3.50 cvss-score: 3.50
cve-id: CVE-2021-25075 cve-id: CVE-2021-25075
cwe-id: CWE-862 cwe-id: CWE-862
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
requests: requests:
- raw: - raw:
@ -48,6 +48,7 @@ requests:
words: words:
- "style=animation-name:rotation onanimationstart=alert(/XSS/) p" - "style=animation-name:rotation onanimationstart=alert(/XSS/) p"
- "toplevel_page_wpda_duplicate_post_menu" - "toplevel_page_wpda_duplicate_post_menu"
condition: and
- type: word - type: word
part: header part: header

View File

@ -1,7 +1,7 @@
id: seo-redirection-xss id: seo-redirection-xss
info: info:
name: SEO Redirection < 7.4 - Reflected Cross-Site Scripting name: WordPress SEO Redirection < 7.4 - Reflected Cross-Site Scripting
author: DhiyaneshDK author: DhiyaneshDK
severity: medium severity: medium
description: | description: |
@ -42,6 +42,7 @@ requests:
words: words:
- "</script><svg/onload=alert(/XSS/)>" - "</script><svg/onload=alert(/XSS/)>"
- "settings_page_seo-redirection" - "settings_page_seo-redirection"
condition: and
- type: word - type: word
part: header part: header