diff --git a/cves/CVE-2019-20141.yaml b/cves/CVE-2019-20141.yaml new file mode 100644 index 0000000000..2018298371 --- /dev/null +++ b/cves/CVE-2019-20141.yaml @@ -0,0 +1,20 @@ +id: cve-2019-20141 + +info: + name: Neon Dashboard - XSS Reflected + author: knassar702 + severity: medium + description: | + An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter. + Source/References: + - https://knassar7o2.blogspot.com/2019/12/neon-dashboard-cve-2019-20141.html +requests: + - method: GET + path: + - "{{BaseURL}}/data/autosuggest-remote.php?q=" + - "{{BaseURL}}/admin/data/autosuggest-remote.php?q=" + matchers: + - type: word + words: + - "" + part: body