31 matches found
340 secretos JWT débiles que debes revisar en tu código
¿Qué pasa con JWT? El token web JSON, usualmente identificado por sus siglas JWT, brinda un recurso eficaz para autenticar y habilitar el acceso en los programas web. No obstante, un uso inadecuado de esta herramienta puede resultar en serios fallos de seguridad. En este escrito, discutiremos los...
Definición de la tríada de la CIA. Ejemplos de confidencialidad, integridad y disponibilidad
Definición de la tríada de la CIA El Modelo AIC o la Triada AIC es una estrategia clave para abordar y coordinar las metodologías de resistencia cibernética. Este enfoque obedecer a tres conceptos clave: la Blindaje, Fidelidad y Accesibilidad. Cada uno de estos conceptos juega un papel determinan...
CVE-2023-46071
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickDatos Protección de Datos RGPD plugin = 3.1.0 versions...
Protección de Datos RGPD <= 3.1.0 - Reflected XSS
Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress Plugin Protección de Datos RGPD Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2023-46071 WordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickDatos Protección de Datos RGPD plugin = 3.1.0 versions...
CVE-2023-46071
CVE-2023-46071 corresponds to an unauthenticated reflected XSS in the WordPress plugin Protección de Datos RGPD (ClickDatos) <= 3.1.0. Root cause is reflected XSS in the plugin; impact per sources is limited to confidentiality/integrity with low severity in NVD metrics (UI interaction required...
PT-2023-29824 · WordPress · Clickdatos Protección De Datos Rgpd
Name of the Vulnerable Software and Affected Versions: ClickDatos Protección de Datos RGPD plugin versions = 3.1.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a...
WordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
Software Protección de Datos RGPD Type Plugin Vulnerable versions = 3.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46071 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b0cb868b9a1f Credits LEE SE...
datos-bo.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1066467 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting datos-bo.com website and its users. Following coordinated a...