{"id":3875,"date":"2024-05-31T18:45:10","date_gmt":"2024-05-31T18:45:10","guid":{"rendered":"http:\/\/127.0.0.1\/popup-builder-4-2-7-cross-site-scripting-almacenado-por-usuario-autenticado-contributor-a-traves-de-js-personalizado\/"},"modified":"2024-05-31T18:45:10","modified_gmt":"2024-05-31T18:45:10","slug":"popup-builder-4-2-7-cross-site-scripting-almacenado-por-usuario-autenticado-contributor-a-traves-de-js-personalizado","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/popup-builder-4-2-7-cross-site-scripting-almacenado-por-usuario-autenticado-contributor-a-traves-de-js-personalizado\/","title":{"rendered":"Popup Builder <= 4.2.7 – Cross-Site Scripting Almacenado por Usuario Autenticado (Contributor+) a trav\u00e9s de JS Personalizado"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-2506 afecta al plugin de WordPress Popup Builder, permitiendo a usuarios autenticados con nivel de contributor y superior inyectar scripts web arbitrarios en p\u00e1ginas, lo que puede ser explotado para ejecutar acciones maliciosas en los navegadores de los usuarios. El plugin Popup Builder hasta la versi\u00f3n 4.2.7 es vulnerable a Cross-Site Scripting almacenado […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1585],"class_list":["post-3875","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2506"],"yoast_head":"\n