{"id":3187,"date":"2024-03-12T14:45:13","date_gmt":"2024-03-12T14:45:13","guid":{"rendered":"http:\/\/127.0.0.1\/estadisticas-de-burst-analiticas-amigables-con-la-privacidad-para-wordpress-1-5-6-1-cross-site-scripting-almacenado-autenticadocontribuidor-a-traves-de-burst_total_pageviews_count\/"},"modified":"2024-03-12T14:45:13","modified_gmt":"2024-03-12T14:45:13","slug":"estadisticas-de-burst-analiticas-amigables-con-la-privacidad-para-wordpress-1-5-6-1-cross-site-scripting-almacenado-autenticadocontribuidor-a-traves-de-burst_total_pageviews_count","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/estadisticas-de-burst-analiticas-amigables-con-la-privacidad-para-wordpress-1-5-6-1-cross-site-scripting-almacenado-autenticadocontribuidor-a-traves-de-burst_total_pageviews_count\/","title":{"rendered":"Estad\u00edsticas de Burst \u2013 Anal\u00edticas Amigables con la Privacidad para WordPress <= 1.5.6.1 – Cross-Site Scripting Almacenado Autenticado(Contribuidor+) a trav\u00e9s de burst_total_pageviews_count"},"content":{"rendered":"
<\/p>\n
El plugin Burst Statistics – Privacy-Friendly Analytics for WordPress para WordPress es vulnerable a Cross-Site Scripting almacenado a trav\u00e9s del campo ‘burst_total_pageviews_count’ en todas las versiones hasta, e incluyendo, 1.5.6.1 debido a una insuficiente sanitizaci\u00f3n de entrada y escape de salida en atributos suministrados por el usuario. Esto permite que atacantes autenticados con permisos de […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[900],"class_list":["post-3187","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1894"],"yoast_head":"\n