Enhancement: cves/2021/CVE-2021-30134.yaml by md

cves/2021/CVE-2021-30134.yaml

@@ -1,11 +1,11 @@
 id: CVE-2021-30134
 
 info:
-  name: php-mod/curl Library - Cross-Site Scripting
+  name: Php-mod/curl Library <2.3.2 - Cross-Site Scripting
   author: theamanrawat
   severity: medium
   description: |
-    php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.
+    Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other attacks.
   reference:
     - https://wpscan.com/vulnerability/0b547728-27d2-402e-ae17-90d539344ec7
     - https://nvd.nist.gov/vuln/detail/CVE-2021-30134
@@ -38,3 +38,5 @@ requests:
       - type: status
         status:
           - 200
+
+# Enhanced by md on 2023/03/07