{"id":3735,"date":"2024-05-20T15:45:08","date_gmt":"2024-05-20T15:45:08","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-xss-almacenada-en-el-plugin-combo-blocks-para-wordpress\/"},"modified":"2024-05-20T15:45:08","modified_gmt":"2024-05-20T15:45:08","slug":"vulnerabilidad-de-cross-site-scripting-xss-almacenada-en-el-plugin-combo-blocks-para-wordpress","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-xss-almacenada-en-el-plugin-combo-blocks-para-wordpress\/","title":{"rendered":"Vulnerabilidad de Cross-Site Scripting (XSS) almacenada en el plugin Combo Blocks para WordPress"},"content":{"rendered":"
<\/p>\n
El plugin Combo Blocks para WordPress hasta la versi\u00f3n 2.2.80 es vulnerable a un Cross-Site Scripting (XSS) almacenado, lo que puede permitir a atacantes autenticados inyectar scripts maliciosos en p\u00e1ginas del sitio. La vulnerabilidad CVE-2024-3155 se debe a la insuficiente sanitizaci\u00f3n de entradas y escape de salidas en varios par\u00e1metros del plugin Post Grid, Form […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1445],"class_list":["post-3735","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-3155"],"yoast_head":"\n