{"id":2540,"date":"2024-01-03T13:41:03","date_gmt":"2024-01-03T13:41:03","guid":{"rendered":"http:\/\/seguridadwordpress.es\/post-smtp-mailer-email-log-notificaciones-de-fallos-en-la-entrega-y-el-mejor-mail-smtp-para-wordpress-2-8-7-cross-site-scripting-almacenada-no-autenticada-a-traves-del-encabezado-de-disposi\/"},"modified":"2024-01-03T13:41:03","modified_gmt":"2024-01-03T13:41:03","slug":"post-smtp-mailer-email-log-notificaciones-de-fallos-en-la-entrega-y-el-mejor-mail-smtp-para-wordpress-2-8-7-cross-site-scripting-almacenada-no-autenticada-a-traves-del-encabezado-de-disposi","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/post-smtp-mailer-email-log-notificaciones-de-fallos-en-la-entrega-y-el-mejor-mail-smtp-para-wordpress-2-8-7-cross-site-scripting-almacenada-no-autenticada-a-traves-del-encabezado-de-disposi\/","title":{"rendered":"POST SMTP Mailer – Email log, Notificaciones de fallos en la entrega y el mejor Mail SMTP para WordPress <= 2.8.7 – Cross-Site Scripting almacenada no autenticada a trav\u00e9s del encabezado de dispositivo"},"content":{"rendered":"
<\/p>\n
El complemento POST SMTP Mailer – Email log, Notificaciones de fallos en la entrega y el mejor Mail SMTP para WordPress en su versi\u00f3n 2.8.7 y anteriores es vulnerable a Cross-Site Scripting almacenada a trav\u00e9s del encabezado ‘device’ debido a la insuficiente sanitizaci\u00f3n de entradas y escapado de salidas. Esto permite que atacantes no autenticados […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[295],"class_list":["post-2540","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2023-7027"],"yoast_head":"\n