{"id":3430,"date":"2024-04-04T18:45:14","date_gmt":"2024-04-04T18:45:14","guid":{"rendered":"http:\/\/127.0.0.1\/custom-post-types-custom-fields-more-5-0-4-cross-site-scripting-almacenado-autenticado-contribuidor\/"},"modified":"2024-04-04T18:45:14","modified_gmt":"2024-04-04T18:45:14","slug":"custom-post-types-custom-fields-more-5-0-4-cross-site-scripting-almacenado-autenticado-contribuidor","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/custom-post-types-custom-fields-more-5-0-4-cross-site-scripting-almacenado-autenticado-contribuidor\/","title":{"rendered":"Custom post types, Custom Fields & more <= 5.0.4 – Cross-Site Scripting Almacenado Autenticado (Contribuidor+)"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2023-6993 afecta al plugin Custom post types, Custom Fields & more para WordPress, permitiendo a atacantes autenticados con permisos de contribuidor o superiores inyectar scripts maliciosos en p\u00e1ginas del sitio. La falta de saneamiento de entradas y escape de salida en los valores de metadatos de las entradas personalizadas permite a un atacante […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1140],"class_list":["post-3430","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2023-6993"],"yoast_head":"\n