{"id":3969,"date":"2024-06-06T18:45:09","date_gmt":"2024-06-06T18:45:09","guid":{"rendered":"http:\/\/127.0.0.1\/colibri-page-builder-1-0-276-cross-site-scripting-almacenada-autenticada-contributor-a-traves-del-shortcode-colibri_video_player\/"},"modified":"2024-06-06T18:45:09","modified_gmt":"2024-06-06T18:45:09","slug":"colibri-page-builder-1-0-276-cross-site-scripting-almacenada-autenticada-contributor-a-traves-del-shortcode-colibri_video_player","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/colibri-page-builder-1-0-276-cross-site-scripting-almacenada-autenticada-contributor-a-traves-del-shortcode-colibri_video_player\/","title":{"rendered":"Colibri Page Builder <= 1.0.276 – Cross-Site Scripting almacenada autenticada (Contributor+) a trav\u00e9s del shortcode colibri_video_player"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-4451 encontrada en el plugin Colibri Page Builder para WordPress permite a atacantes autenticados con acceso de nivel contribuidor o superior, inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cada vez que un usuario acceda a una p\u00e1gina comprometida. La versi\u00f3n 1.0.276 y anteriores del plugin Colibri Page Builder son susceptibles a […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1679],"class_list":["post-3969","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-4451"],"yoast_head":"\n