{"id":3156,"date":"2024-03-11T20:45:11","date_gmt":"2024-03-11T20:45:11","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-en-wp-statistics-14-5-cross-site-scripting-almacenado-sin-autenticacion\/"},"modified":"2024-03-11T20:45:11","modified_gmt":"2024-03-11T20:45:11","slug":"vulnerabilidad-en-wp-statistics-14-5-cross-site-scripting-almacenado-sin-autenticacion","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-en-wp-statistics-14-5-cross-site-scripting-almacenado-sin-autenticacion\/","title":{"rendered":"Vulnerabilidad en WP Statistics <= 14.5 – Cross-Site Scripting almacenado sin autenticaci\u00f3n"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-2194 afecta al plugin WP Statistics para WordPress, permitiendo a atacantes no autenticados inyectar scripts maliciosos en p\u00e1ginas web a trav\u00e9s de par\u00e1metros de b\u00fasqueda en la URL. La falta de sanitizaci\u00f3n de entradas y escape de salida en las versiones hasta la 14.5 del plugin WP Statistics para WordPress permite a atacantes […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[869],"class_list":["post-3156","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2194"],"yoast_head":"\n