{"id":3071,"date":"2024-03-01T19:45:22","date_gmt":"2024-03-01T19:45:22","guid":{"rendered":"http:\/\/127.0.0.1\/nextend-social-login-y-register-3-1-12-cross-site-scripting-reflejado-self-based-a-traves-de-error_description\/"},"modified":"2024-03-01T19:45:22","modified_gmt":"2024-03-01T19:45:22","slug":"nextend-social-login-y-register-3-1-12-cross-site-scripting-reflejado-self-based-a-traves-de-error_description","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/nextend-social-login-y-register-3-1-12-cross-site-scripting-reflejado-self-based-a-traves-de-error_description\/","title":{"rendered":"Nextend Social Login y Register <= 3.1.12 – Cross-Site Scripting Reflejado Self-Based a trav\u00e9s de error_description"},"content":{"rendered":"
<\/p>\n
El plugin Nextend Social Login y Register para WordPress es vulnerable a un Cross-Site Scripting Reflejado Self-Based a trav\u00e9s del par\u00e1metro ‘error_description’ en todas las versiones hasta, e incluyendo, la 3.1.12 debido a una insuficiente sanitizaci\u00f3n de la entrada y escape de la salida. Esto permite que atacantes no autenticados, con acceso a una cuenta […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[784],"class_list":["post-3071","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1775"],"yoast_head":"\n