Merge pull request #2518 from nrathaus/master

Updated References and description

cves/2018/CVE-2018-16299.yaml

@@ -4,6 +4,7 @@ info:
   name: WordPress Plugin Localize My Post 1.0 - LFI
   author: 0x_Akoko,0x240x23elu
   severity: high
+  description: The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.
   reference: https://www.exploit-db.com/exploits/45439
   tags: wordpress,cve2018,cve,lfi
 

cves/2019/CVE-2019-15889.yaml

@@ -4,7 +4,10 @@ info:
   name: WordPress Plugin Download Manager 2.9.93 - Reflected Cross-Site Scripting (XSS)
   author: daffainfo
   severity: medium
-  reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15889
+  description: The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.
+  reference:
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15889
+    - https://www.cybersecurity-help.cz/vdb/SB2019041819
   tags: cve,cve2019,wordpress,xss,wp-plugin
 
 requests:

cves/2020/CVE-2020-29395.yaml

@@ -4,6 +4,7 @@ info:
   name: Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting (XSS)
   author: daffainfo
   severity: medium
+  description: The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.
   reference:
     - https://github.com/mustgundogdu/Research/tree/main/EventON_PLUGIN_XSS
     - https://nvd.nist.gov/vuln/detail/CVE-2020-29395

cves/2021/CVE-2021-24495.yaml

@@ -5,6 +5,7 @@ info:
   author: johnjhacking
   severity: medium
   tags: cve,cve2021,wp-plugin,wordpress,xss
+  description: The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.
   reference:
     - https://johnjhacking.com/blog/cve-2021-24495-improper-neutralization-of-input-during-web-page-generation-on-id-parameter-in-wordpress-marmoset-viewer-plugin-versions-1.9.3-leads-to-reflected-cross-site-scripting/
     - https://wordpress.org/plugins/marmoset-viewer/#developers