From 2ff08813259b1aa13351ac1e4eb2ebec3538e203 Mon Sep 17 00:00:00 2001
From: sandeep <8293321+ehsandeep@users.noreply.github.com>
Date: Thu, 18 Mar 2021 00:05:04 +0530
Subject: [PATCH] Update CVE-2020-29164.yaml

---
 cves/2020/CVE-2020-29164.yaml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/cves/2020/CVE-2020-29164.yaml b/cves/2020/CVE-2020-29164.yaml
index a7b2abaf30..ad147b8a20 100644
--- a/cves/2020/CVE-2020-29164.yaml
+++ b/cves/2020/CVE-2020-29164.yaml
@@ -6,6 +6,7 @@ info:
   author: geeknik
   severity: medium
   tags: pacsone,xss,cve,cve2020
+  reference: https://gist.github.com/leommxj/0a32afeeaac960682c5b7c9ca8ed070d
 
 requests:
   - method: GET
@@ -14,13 +15,13 @@ requests:
 
     matchers-condition: and
     matchers:
-      - type: status
-        status:
-          - 301
-          - 302
-        negative: true
 
       - type: word
         words:
-          - "<img src=\"\" onerror=\"alert(1);\">1</img>"
+          - "text/html"
+        part: header
+
+      - type: word
+        words:
+          - '<img src="" onerror="alert(1);">1</img>'
         part: body