Update CVE-2022-0346.yaml
parent
5885e9ac0d
commit
cc5dddac3f
|
@ -2,7 +2,7 @@ id: CVE-2022-0346
|
|||
|
||||
info:
|
||||
name: WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting
|
||||
author: Akincibor, theamanrawat
|
||||
author: Akincibor,theamanrawat
|
||||
severity: medium
|
||||
description: |
|
||||
WordPress XML Sitemap Generator for Google plugin before 2.0.4 contains a vulnerability that can lead to cross-site scripting or remote code execution. It does not validate a parameter which can be set to an arbitrary value, thus causing cross-site scripting via error message or remote code execution if allow_url_include is turned on.
|
||||
|
@ -16,8 +16,8 @@ info:
|
|||
cve-id: CVE-2022-0346
|
||||
cwe-id: CWE-79
|
||||
metadata:
|
||||
verified: "true"
|
||||
tags: cve,cve2022,xss,wp,wordpress,wp-plugin,wpscan
|
||||
verified: true
|
||||
tags: cve,cve2022,wp,wordpress,wp-plugin,xss,www-xml-sitemap-generator-org
|
||||
|
||||
requests:
|
||||
- method: GET
|
||||
|
@ -38,4 +38,4 @@ requests:
|
|||
- type: word
|
||||
part: body_2
|
||||
words:
|
||||
- "2ef3baa95802a4b646f2fc29075efe34"
|
||||
- "2ef3baa95802a4b646f2fc29075efe34"
|
||||
|
|
Loading…
Reference in New Issue