""ET WEB_SPECIFIC_APPS Appointment Hour Booking - WordPress Plugin - Stored XSS (CVE-2019-13505)""

SID: 2027706

Revision: 2

Class Type: web-application-attack

Metadata: affected_product Wordpress_Plugins, attack_target Web_Server, created_at 2019_07_12, deployment Internet, performance_impact Low, signature_severity Major, updated_at 2019_07_12

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HTTP_SERVERS

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "POST"

  • Value: "form-data|3b 20|name=|22|cp_appbooking_pform_process|22|"

  • Value: "form-data|3b 20|name=|22|email_1|22 0d 0a 0d 0a 3c|script|3e|"

Within:

PCRE:

Special Options:

  • http_method

  • http_client_body

  • fast_pattern

  • http_client_body

source