Update CVE-2023-2309.yaml

http/cves/2023/CVE-2023-2309.yaml

@@ -11,19 +11,22 @@ info:
     - https://nvd.nist.gov/vuln/detail/CVE-2023-2309
     - https://wpscan.com/vulnerability/1b3f4558-ea41-4749-9aa2-d3971fc9ca0d/
     - https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpforo/wpforo-forum-218-reflected-cross-site-scripting-via-wpforo-debug
+    - https://github.com/fkie-cad/nvd-json-data-feeds
   classification:
     cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
     cvss-score: 6.1
     cve-id: CVE-2023-2309
     epss-score: 0.00052
-    epss-percentile: 0.20645
+    epss-percentile: 0.20793
     cpe: cpe:2.3:a:gvectors:wpforo_forum:*:*:*:*:*:wordpress:*:*
   metadata:
+    verified: true
     max-request: 1
     vendor: gvectors
     product: wpforo_forum
     framework: wordpress
-  tags: xss,wpscan,cve,cve2023,wp-plugin
+    publicwww-query: "/wp-content/plugins/wpforo/"
+  tags: cve,cve2023,wordpress,wpforo,wpscan,wp-plugin,wp,xss
 
 http:
   - raw:
@@ -34,6 +37,7 @@ http:
     matchers:
       - type: dsl
         dsl:
-          - 'contains(body,"<script>alert(/document.domain/)</script>") && contains(header,"text/html")'
+          - 'contains_all(body,"<script>alert(/document.domain/)</script>","wpforo")'
+          - 'contains(header,"text/html")'
           - 'status_code == 200'
         condition: and