Skip to content

Commit

Permalink
New Nuclei template for verbosa-e615dc0934ef39b83b218f882f2cbef3.yaml…
Browse files Browse the repository at this point in the history
… [Wed Sep 25 03:41:42 UTC 2024] :robot:
  • Loading branch information
actions-user committed Sep 25, 2024
1 parent 88fafd5 commit 9a82b52
Showing 1 changed file with 59 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
id: verbosa-e615dc0934ef39b83b218f882f2cbef3

info:
name: >
Verbosa <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
author: topscoder
severity: low
description: >
reference:
- https://github.com/topscoder/nuclei-wordfence-cve
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d8cf8cff-9d69-4593-afd5-1fc9a10ebd14?source=api-scan
classification:
cvss-metrics:
cvss-score:
cve-id:
metadata:
fofa-query: "wp-content/themes/verbosa/"
google-query: inurl:"/wp-content/themes/verbosa/"
shodan-query: 'vuln:'
tags: cve,wordpress,wp-theme,verbosa,low

http:
- method: GET
redirects: true
max-redirects: 3
path:
- "{{BaseURL}}/wp-content/themes/verbosa/style.css"

extractors:
- type: regex
name: version
part: body
group: 1
internal: true
regex:
- "(?mi)Version: ([0-9.]+)"

- type: regex
name: version
part: body
group: 1
regex:
- "(?mi)Version: ([0-9.]+)"

matchers-condition: and
matchers:
- type: status
status:
- 200

- type: word
words:
- "verbosa"
part: body

- type: dsl
dsl:
- compare_versions(version, '<= 1.2.3')

0 comments on commit 9a82b52

Please sign in to comment.