Enhancement: cves/2022/CVE-2022-1609.yaml by mp

cves/2022/CVE-2022-1609.yaml

@@ -1,14 +1,20 @@
 id: CVE-2022-1609
 
 info:
-  name: The School Management < 9.9.7 - Unauthenticated RCE via REST api
+  name: The School Management < 9.9.7 - Remote Code Execution
   author: For3stCo1d
   severity: critical
+  description: The School Management plugin before version 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.
   reference:
     - https://wpscan.com/vulnerability/e2d546c9-85b6-47a4-b951-781b9ae5d0f2
     - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1609
   metadata:
     verified: false
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
+    cvss-score: 10.0
+    cve-id: CVE-2022-1609
+    cwe-id: CWE-77
   tags: cve2022,wordpress,rce,cve,wp,backdoor
 
 variables:
@@ -28,3 +34,5 @@ requests:
       - type: word
         words:
           - '9061-2202-EVC'
+
+# Enhanced by mp on 2022/05/27