Update CVE-2022-43016.yaml

cves/2022/CVE-2022-43016.yaml

@@ -8,7 +8,11 @@ info:
     OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component.
   reference:
     - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43016
-  tags: xss,cve,2022
+    - https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_callback.md
+  metadata:
+    verified: true
+    shodan-query: title:"OpenCATS"
+  tags: cve,cve2022,xss,opencats
 
 requests:
   - raw:
@@ -28,10 +32,16 @@ requests:
     cookie-reuse: true
     matchers-condition: and
     matchers:
+      - type: word
+        part: body
+        words:
+          - 'cats_connected = true EVAL=<script>alert(document.cookie)</script>'
+
+      - type: word
+        part: header
+        words:
+          - "text/html"
+
       - type: status
         status:
           - 200
-
-      - type: word
-        words:
-          - '<script>alert(document.cookie)</script>'