{"id":3930,"date":"2024-06-05T13:45:55","date_gmt":"2024-06-05T13:45:55","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-easy-social-like-box-popup-sidebar-widget-4-0\/"},"modified":"2024-06-05T13:45:55","modified_gmt":"2024-06-05T13:45:55","slug":"vulnerabilidad-de-cross-site-scripting-almacenado-en-easy-social-like-box-popup-sidebar-widget-4-0","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-de-cross-site-scripting-almacenado-en-easy-social-like-box-popup-sidebar-widget-4-0\/","title":{"rendered":"Vulnerabilidad de Cross-Site Scripting almacenado en Easy Social Like Box \u2013 Popup \u2013 Sidebar Widget <= 4.0"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad de Cross-Site Scripting almacenado en el plugin Easy Social Like Box \u2013 Popup \u2013 Sidebar Widget para WordPress permite a atacantes autenticados inyectar scripts web arbitrarios en p\u00e1ginas del sitio web. La vulnerabilidad se encuentra en el shortcode ‘cardoza_facebook_like_box’ del plugin en todas las versiones hasta la 4.0 debido a la insuficiente sanitizaci\u00f3n […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1640],"class_list":["post-3930","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-5224"],"yoast_head":"\n