{"id":3800,"date":"2024-05-22T21:45:09","date_gmt":"2024-05-22T21:45:09","guid":{"rendered":"http:\/\/127.0.0.1\/profilepress-4-15-8-cross-site-scripting-almacenado-autenticado-contribuidor-a-traves-del-widget-panel-de-usuario-de-profilepress\/"},"modified":"2024-05-22T21:45:09","modified_gmt":"2024-05-22T21:45:09","slug":"profilepress-4-15-8-cross-site-scripting-almacenado-autenticado-contribuidor-a-traves-del-widget-panel-de-usuario-de-profilepress","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/profilepress-4-15-8-cross-site-scripting-almacenado-autenticado-contribuidor-a-traves-del-widget-panel-de-usuario-de-profilepress\/","title":{"rendered":"ProfilePress <= 4.15.8 – Cross-Site Scripting almacenado autenticado (Contribuidor+) a trav\u00e9s del Widget Panel de Usuario de ProfilePress"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-2861 afecta al plugin de WordPress ProfilePress en todas las versiones hasta la 4.15.8, permitiendo a atacantes autenticados con acceso de contribuidor o superior inyectar scripts web arbitrarios en p\u00e1ginas del sitio. La falta de sanitizaci\u00f3n de la entrada y escape de la salida en los atributos proporcionados por los usuarios en el […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1510],"class_list":["post-3800","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2861"],"yoast_head":"\n