diff --git a/http/cves/2018/CVE-2018-5316.yaml b/http/cves/2018/CVE-2018-5316.yaml
index 9071440999..aa211cb3a3 100644
--- a/http/cves/2018/CVE-2018-5316.yaml
+++ b/http/cves/2018/CVE-2018-5316.yaml
@@ -19,22 +19,25 @@ info:
cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*
metadata:
max-request: 1
+ verified: true
framework: wordpress
vendor: patsatech
product: sagepay_server_gateway_for_woocommerce
- tags: cve2018,wordpress,xss,wp-plugin,woocommerce,packetstorm,cve
+ tags: cve2018,wordpress,xss,wp-plugin,wp,woocommerce,packetstorm,cve
http:
- method: GET
path:
- - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+ - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=">'
matchers-condition: and
matchers:
- type: word
part: body
words:
- - ""
+ - '">'
+ - 'Authenticate your card'
+ condition: and
- type: word
part: header
@@ -43,4 +46,4 @@ http:
- type: status
status:
- - 200
+ - 200
\ No newline at end of file