minor matcher update
parent
3f66b769c1
commit
22ab0f9d53
|
@ -1,7 +1,7 @@
|
||||||
id: CVE-2021-25075
|
id: CVE-2021-25075
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS
|
name: WordPress Duplicate Page or Post < 1.5.1 - Stored XSS
|
||||||
author: DhiyaneshDK
|
author: DhiyaneshDK
|
||||||
severity: low
|
severity: low
|
||||||
description: |
|
description: |
|
||||||
|
@ -10,12 +10,12 @@ info:
|
||||||
reference:
|
reference:
|
||||||
- https://wpscan.com/vulnerability/db5a0431-af4d-45b7-be4e-36b6c90a601b
|
- https://wpscan.com/vulnerability/db5a0431-af4d-45b7-be4e-36b6c90a601b
|
||||||
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25075
|
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25075
|
||||||
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
|
|
||||||
classification:
|
classification:
|
||||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
|
||||||
cvss-score: 3.50
|
cvss-score: 3.50
|
||||||
cve-id: CVE-2021-25075
|
cve-id: CVE-2021-25075
|
||||||
cwe-id: CWE-862
|
cwe-id: CWE-862
|
||||||
|
tags: cve,cve2021,wordpress,xss,wp-plugin,authenticated
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- raw:
|
- raw:
|
||||||
|
@ -48,6 +48,7 @@ requests:
|
||||||
words:
|
words:
|
||||||
- "style=animation-name:rotation onanimationstart=alert(/XSS/) p"
|
- "style=animation-name:rotation onanimationstart=alert(/XSS/) p"
|
||||||
- "toplevel_page_wpda_duplicate_post_menu"
|
- "toplevel_page_wpda_duplicate_post_menu"
|
||||||
|
condition: and
|
||||||
|
|
||||||
- type: word
|
- type: word
|
||||||
part: header
|
part: header
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
id: seo-redirection-xss
|
id: seo-redirection-xss
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: SEO Redirection < 7.4 - Reflected Cross-Site Scripting
|
name: WordPress SEO Redirection < 7.4 - Reflected Cross-Site Scripting
|
||||||
author: DhiyaneshDK
|
author: DhiyaneshDK
|
||||||
severity: medium
|
severity: medium
|
||||||
description: |
|
description: |
|
||||||
|
@ -42,6 +42,7 @@ requests:
|
||||||
words:
|
words:
|
||||||
- "</script><svg/onload=alert(/XSS/)>"
|
- "</script><svg/onload=alert(/XSS/)>"
|
||||||
- "settings_page_seo-redirection"
|
- "settings_page_seo-redirection"
|
||||||
|
condition: and
|
||||||
|
|
||||||
- type: word
|
- type: word
|
||||||
part: header
|
part: header
|
||||||
|
|
Loading…
Reference in New Issue