Update CVE-2022-0599.yaml

cves/2022/CVE-2022-0599.yaml

@@ -1,21 +1,21 @@
 id: CVE-2022-0599
 
 info:
-  name: WordPress The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 - Reflected XSS
+  name: The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 - Reflected XSS
   author: scent2d
   severity: medium
   description: |
     The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
   reference:
     - https://wpscan.com/vulnerability/4f1d45bc-d3bd-472c-959d-05abeff32765
+    - https://wordpress.org/plugins/mapping-multiple-urls-redirect-same-page/
     - https://nvd.nist.gov/vuln/detail/cve-2022-0599
-    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-0599
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.1
     cve-id: CVE-2022-0599
     cwe-id: CWE-79
-  tags: cve,cve2022,wordpress,wp-plugin,wpcentral,xss,wp,authenticated
+  tags: cve,cve2022,wordpress,wp-plugin,xss,wp,authenticated
 
 requests:
   - raw:
@@ -32,10 +32,15 @@ requests:
 
     cookie-reuse: true
     req-condition: true
+    matchers-condition: and
     matchers:
+      - type: word
+        part: body
+        words:
+          - 'id="mmursp_id" value="\"><svg/onload=alert(document.domain)>" />'
+
       - type: dsl
         dsl:
           - 'status_code_2 == 200'
           - 'contains(all_headers_2, "text/html")'
-          - 'contains(body_2, "><svg/onload=alert(document.domain)>")'
         condition: and