Update CVE-2020-24912.yaml

cves/2020/CVE-2020-24912.yaml

@@ -4,7 +4,7 @@ info:
   name: QCube Cross-Site-Scripting
   author: pikpikcu
   severity: medium
-  description: reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.
+  description: A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.
   reference:
     - https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-03
     - https://nvd.nist.gov/vuln/detail/CVE-2020-24912
@@ -26,8 +26,7 @@ requests:
 
       - type: word
         words:
-          - 'strProfileData'
-          - "YToxOntpOjA7YTozOntzOjEyOiJvYmpCYWNrdHJhY2UiO2E6MTp7czo0OiJhcmdzIjthOjE6e2k6MDtzOjM6IlBXTiI7fX1zOjg6InN0clF1ZXJ5IjtzOjExMjoic2VsZWN0IHZlcnNpb24oKTsgc2VsZWN0IGNvbnZlcnRfZnJvbShkZWNvZGUoJCRQSE5qY21sd2RENWhiR1Z5ZENnbmVITnpKeWs4TDNOamNtbHdkRDRLJCQsJCRiYXNlNjQkJCksJCR1dGYtOCQkKSI7czoxMToiZGJsVGltZUluZm8iO3M6MToiMSI7fX0K="
+          - "<script>alert('xss')</script>"
         part: body
 
       - type: word