{"id":3102,"date":"2024-03-05T21:45:06","date_gmt":"2024-03-05T21:45:06","guid":{"rendered":"http:\/\/127.0.0.1\/simple-membership-4-4-2-cross-site-scripting-basado-en-almacenamiento-sin-autenticacion\/"},"modified":"2024-03-05T21:45:06","modified_gmt":"2024-03-05T21:45:06","slug":"simple-membership-4-4-2-cross-site-scripting-basado-en-almacenamiento-sin-autenticacion","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/simple-membership-4-4-2-cross-site-scripting-basado-en-almacenamiento-sin-autenticacion\/","title":{"rendered":"Simple Membership <= 4.4.2 – Cross-Site Scripting basado en almacenamiento sin autenticaci\u00f3n"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-1985 afecta al plugin Simple Membership para WordPress, permitiendo a atacantes no autenticados realizar ataques de Cross-Site Scripting almacenado a trav\u00e9s del par\u00e1metro ‘Nombre a mostrar’. Esta vulnerabilidad se da en todas las versiones hasta la 4.4.2 debido a una insuficiente sanitizaci\u00f3n de entrada y escape de salida. Los atacantes podr\u00edan inyectar scripts […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[815],"class_list":["post-3102","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1985"],"yoast_head":"\n