diff --git a/nuclei-templates/cve-less/themes/verbosa-e615dc0934ef39b83b218f882f2cbef3.yaml b/nuclei-templates/cve-less/themes/verbosa-e615dc0934ef39b83b218f882f2cbef3.yaml new file mode 100644 index 0000000000..0afdf04d52 --- /dev/null +++ b/nuclei-templates/cve-less/themes/verbosa-e615dc0934ef39b83b218f882f2cbef3.yaml @@ -0,0 +1,59 @@ +id: verbosa-e615dc0934ef39b83b218f882f2cbef3 + +info: + name: > + Verbosa <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting + author: topscoder + severity: low + description: > + + reference: + - https://github.com/topscoder/nuclei-wordfence-cve + - https://www.wordfence.com/threat-intel/vulnerabilities/id/d8cf8cff-9d69-4593-afd5-1fc9a10ebd14?source=api-scan + classification: + cvss-metrics: + cvss-score: + cve-id: + metadata: + fofa-query: "wp-content/themes/verbosa/" + google-query: inurl:"/wp-content/themes/verbosa/" + shodan-query: 'vuln:' + tags: cve,wordpress,wp-theme,verbosa,low + +http: + - method: GET + redirects: true + max-redirects: 3 + path: + - "{{BaseURL}}/wp-content/themes/verbosa/style.css" + + extractors: + - type: regex + name: version + part: body + group: 1 + internal: true + regex: + - "(?mi)Version: ([0-9.]+)" + + - type: regex + name: version + part: body + group: 1 + regex: + - "(?mi)Version: ([0-9.]+)" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - "verbosa" + part: body + + - type: dsl + dsl: + - compare_versions(version, '<= 1.2.3') \ No newline at end of file