Enhancement: cves/2021/CVE-2021-39312.yaml by mp

cves/2021/CVE-2021-39312.yaml

@@ -1,15 +1,15 @@
 id: CVE-2021-39312
 
 info:
-  name: True Ranker < 2.2.4 - Unauthenticated Arbitrary File Access via Path Traversal
+  name: WordPress True Ranker <2.2.4 - Local File Inclusion
   author: DhiyaneshDK
   severity: high
-  description: The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file.
+  description: WordPress True Ranker before version 2.2.4 allows sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file via local file inclusion.
   reference:
     - https://wpscan.com/vulnerability/d48e723c-e3d1-411e-ab8e-629fe1606c79
-    - https://nvd.nist.gov/vuln/detail/CVE-2021-39312
     - https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39312
     - https://plugins.trac.wordpress.org/browser/seo-local-rank/tags/2.2.2/admin/vendor/datatables/examples/resources/examples.php
+    - https://nvd.nist.gov/vuln/detail/CVE-2021-39312
   remediation: Fixed in version 2.2.4
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
@@ -40,3 +40,5 @@ requests:
       - type: status
         status:
           - 200
+
+# Enhanced by mp on 2022/06/30