{"id":2872,"date":"2024-02-12T19:45:18","date_gmt":"2024-02-12T19:45:18","guid":{"rendered":"http:\/\/127.0.0.1\/siteorigin-widgets-bundle-1-58-3-cross-site-scripting-almacenada-autenticada-contributor\/"},"modified":"2024-02-12T19:45:18","modified_gmt":"2024-02-12T19:45:18","slug":"siteorigin-widgets-bundle-1-58-3-cross-site-scripting-almacenada-autenticada-contributor","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/siteorigin-widgets-bundle-1-58-3-cross-site-scripting-almacenada-autenticada-contributor\/","title":{"rendered":"SiteOrigin Widgets Bundle <= 1.58.3 – Cross-Site Scripting almacenada autenticada (Contributor+)"},"content":{"rendered":"
<\/p>\n
En este art\u00edculo, abordaremos una grave vulnerabilidad de seguridad en el plugin SiteOrigin Widgets Bundle para WordPress, que permite la ejecuci\u00f3n de scripts maliciosos en p\u00e1ginas web. Los atacantes autenticados con acceso de colaborador o superior pueden aprovechar esta vulnerabilidad para inyectar scripts que se ejecutar\u00e1n cuando un usuario acceda a una p\u00e1gina comprometida. La […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[585],"class_list":["post-2872","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1058"],"yoast_head":"\n