{"id":2921,"date":"2024-02-19T15:45:27","date_gmt":"2024-02-19T15:45:27","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/"},"modified":"2024-02-19T15:45:27","modified_gmt":"2024-02-19T15:45:27","slug":"vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/","title":{"rendered":"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress"},"content":{"rendered":"<div>La vulnerabilidad CVE-2024-1519 afecta al plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content \u2013 ProfilePress en versiones hasta la 4.14.4. Esta vulnerabilidad permite a atacantes no autenticados inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cuando un usuario acceda a la p\u00e1gina inyectada.<\/div>\n<p><\/p>\n<div>La vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin es causada por una neutralizaci\u00f3n inadecuada de la entrada de datos durante la generaci\u00f3n de p\u00e1ginas web. Esto significa que los atacantes pueden insertar c\u00f3digo malicioso en el par\u00e1metro &#8216;name&#8217; del plugin, lo que puede llevar a la ejecuci\u00f3n de scripts no deseados en el navegador de los usuarios. Para mitigar esta vulnerabilidad, se recomienda desactivar la p\u00e1gina de listado de miembros y cambiar el tema de Gerbera a uno m\u00e1s seguro.<\/div>\n<div>Es crucial que los administradores de sitios web que utilicen el plugin Paid Membership Plugin actualicen a la \u00faltima versi\u00f3n disponible, en este caso, la 4.14.5 o posterior, que incluye medidas de seguridad mejoradas para prevenir este tipo de ataques de Cross-Site Scripting Almacenado.<\/div>\n","protected":false},"excerpt":{"rendered":"<p>La vulnerabilidad CVE-2024-1519 afecta al plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content \u2013 ProfilePress en versiones hasta la 4.14.4. Esta vulnerabilidad permite a atacantes no autenticados inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cuando un usuario acceda a la p\u00e1gina inyectada. La vulnerabilidad de Cross-Site [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[634],"class_list":["post-2921","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1519"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress - SeguridadWordPress.es<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress - SeguridadWordPress.es\" \/>\n<meta property=\"og:description\" content=\"La vulnerabilidad CVE-2024-1519 afecta al plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content \u2013 ProfilePress en versiones hasta la 4.14.4. Esta vulnerabilidad permite a atacantes no autenticados inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cuando un usuario acceda a la p\u00e1gina inyectada. La vulnerabilidad de Cross-Site [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/\" \/>\n<meta property=\"og:site_name\" content=\"SeguridadWordPress.es\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-19T15:45:27+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/\",\"url\":\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/\",\"name\":\"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress - SeguridadWordPress.es\",\"isPartOf\":{\"@id\":\"http:\/\/127.0.0.1\/#website\"},\"datePublished\":\"2024-02-19T15:45:27+00:00\",\"dateModified\":\"2024-02-19T15:45:27+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/127.0.0.1\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/127.0.0.1\/#website\",\"url\":\"http:\/\/127.0.0.1\/\",\"name\":\"SeguridadWordPress.es\",\"description\":\"Recopilaci\u00f3n de vulnerabilidades WordPress.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/127.0.0.1\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress - SeguridadWordPress.es","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/","og_locale":"en_US","og_type":"article","og_title":"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress - SeguridadWordPress.es","og_description":"La vulnerabilidad CVE-2024-1519 afecta al plugin Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &amp; Restrict Content \u2013 ProfilePress en versiones hasta la 4.14.4. Esta vulnerabilidad permite a atacantes no autenticados inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cuando un usuario acceda a la p\u00e1gina inyectada. La vulnerabilidad de Cross-Site [&hellip;]","og_url":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/","og_site_name":"SeguridadWordPress.es","article_published_time":"2024-02-19T15:45:27+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/","url":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/","name":"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress - SeguridadWordPress.es","isPartOf":{"@id":"http:\/\/127.0.0.1\/#website"},"datePublished":"2024-02-19T15:45:27+00:00","dateModified":"2024-02-19T15:45:27+00:00","author":{"@id":""},"breadcrumb":{"@id":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-paid-membership-plugin-para-wordpress\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/127.0.0.1\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad de Cross-Site Scripting Almacenado en Paid Membership Plugin para WordPress"}]},{"@type":"WebSite","@id":"http:\/\/127.0.0.1\/#website","url":"http:\/\/127.0.0.1\/","name":"SeguridadWordPress.es","description":"Recopilaci\u00f3n de vulnerabilidades WordPress.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/127.0.0.1\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"amp_enabled":true,"_links":{"self":[{"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts\/2921"}],"collection":[{"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/comments?post=2921"}],"version-history":[{"count":0,"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts\/2921\/revisions"}],"wp:attachment":[{"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/media?parent=2921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/categories?post=2921"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/127.0.0.1\/wp-json\/wp\/v2\/tags?post=2921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}