{"id":3747,"date":"2024-05-20T21:45:28","date_gmt":"2024-05-20T21:45:28","guid":{"rendered":"http:\/\/127.0.0.1\/plugin-de-shortcodes-de-wp-shortcodes-ultimate-7-1-5-xss-autenticado-contributor-almacenado-a-traves-del-shortcode-su_members\/"},"modified":"2024-05-20T21:45:28","modified_gmt":"2024-05-20T21:45:28","slug":"plugin-de-shortcodes-de-wp-shortcodes-ultimate-7-1-5-xss-autenticado-contributor-almacenado-a-traves-del-shortcode-su_members","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/plugin-de-shortcodes-de-wp-shortcodes-ultimate-7-1-5-xss-autenticado-contributor-almacenado-a-traves-del-shortcode-su_members\/","title":{"rendered":"Plugin de Shortcodes de WP – Shortcodes Ultimate <= 7.1.5 – XSS autenticado (Contributor+) almacenado a trav\u00e9s del Shortcode su_members"},"content":{"rendered":"
<\/p>\n
El plugin WP Shortcodes – Shortcodes Ultimate para WordPress es vulnerable a XSS almacenado a trav\u00e9s del shortcode ‘su_members’ en todas las versiones hasta, e incluyendo, la 7.1.5 debido a la falta de saneamiento de entrada y escape de salida en el atributo ‘color’ proporcionado por el usuario. Esto permite a atacantes autenticados, con acceso […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1457],"class_list":["post-3747","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-4553"],"yoast_head":"\n