{"id":3961,"date":"2024-06-06T15:45:20","date_gmt":"2024-06-06T15:45:20","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-de-xss-almacenado-en-wp-jquery-lightbox-1-5-4-cross-site-scripting-autenticado-contribuidor-a-traves-del-atributo-de-titulo\/"},"modified":"2024-06-06T15:45:20","modified_gmt":"2024-06-06T15:45:20","slug":"vulnerabilidad-de-xss-almacenado-en-wp-jquery-lightbox-1-5-4-cross-site-scripting-autenticado-contribuidor-a-traves-del-atributo-de-titulo","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-de-xss-almacenado-en-wp-jquery-lightbox-1-5-4-cross-site-scripting-autenticado-contribuidor-a-traves-del-atributo-de-titulo\/","title":{"rendered":"Vulnerabilidad de XSS almacenado en WP jQuery Lightbox <= 1.5.4 – Cross-Site Scripting autenticado (Contribuidor+) a trav\u00e9s del atributo de t\u00edtulo"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-5425 afecta al plugin WP jQuery Lightbox para WordPress, permitiendo a atacantes autenticados con nivel de acceso de Contribuidor o superior, inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cuando un usuario acceda a dicha p\u00e1gina. La versi\u00f3n 1.5.4 y anteriores del plugin WP jQuery Lightbox no realizan una sanitizaci\u00f3n suficiente de […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1671],"class_list":["post-3961","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-5425"],"yoast_head":"\n