Merge pull request #23 from ghsec/patch-12

Update wordpress-reflected-xss-cve-2019-20141.yaml
jaeles-project · Feb 15, 2021 · 450a88a · 450a88a
2 parents 8848d24 + 4325bbe
commit 450a88a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cves/wordpress-reflected-xss-cve-2019-20141.yaml b/cves/wordpress-reflected-xss-cve-2019-20141.yaml
@@ -18,6 +18,6 @@ requests:
       - User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3984.0 Safari/537.36
     detections:
       - >-
-        StringSearch("resHeaders", "<img src=x onerror=alert(1)>") 
+        StringSearch("resHeaders", "<img src=x onerror=alert(1)>") && StatusCode() != 301 && StatusCode() != 302
 references:
   - https://www.cvebase.com/cve/2019/20141