{"id":340,"date":"2015-10-02T08:16:22","date_gmt":"2015-10-02T08:16:22","guid":{"rendered":"http:\/\/profesionalhosting.com\/blog\/?p=340"},"modified":"2023-04-25T13:36:53","modified_gmt":"2023-04-25T11:36:53","slug":"vulnerabilidad-xss-en-jetpack","status":"publish","type":"post","link":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/","title":{"rendered":"Vulnerabilidad XSS en Jetpack"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_79_2 ez-toc-wrap-left-text counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Tabla de contenidos<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Alternar tabla de contenidos\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#%C2%BFEsta_usted_en_riesgo_por_la_vulnerabilidad_XSS_en_Jetpack\" >\u00bfEst\u00e1 usted en riesgo por la vulnerabilidad XSS en Jetpack?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#Actualizar_Jepack_lo_antes_posible\" >Actualizar Jepack lo antes posible<\/a><\/li><\/ul><\/nav><\/div>\n<p>Durante una auditor\u00eda de rutina que realiza <a href=\"https:\/\/sucuri.net\/\" target=\"_blank\" rel=\"noopener nofollow\">sucuri.net<\/a>, descubri\u00f3 un XSS cr\u00edtico que afecta el <a href=\"https:\/\/wordpress.org\/plugins\/jetpack\/\" target=\"_blank\" rel=\"noopener nofollow\">plugin de WordPress Jetpack<\/a>, una de los plugins m\u00e1s populares en el ecosistema de WordPress.<\/p>\n<p><!--more--><\/p>\n<p><strong>Vulnerabilidad de divulgaci\u00f3n de la l\u00ednea de tiempo:<\/strong><br \/>\n10 de septiembre 2015 &#8211; Informe inicial al equipo de seguridad de Automattic<br \/>\n10 de septiembre 2015 &#8211; Recepci\u00f3n del equipo de seguridad Automattic acks del informe, fija fecha parche para 22 de septiembre<br \/>\n28 de septiembre 2015 &#8211; Parche publicado con el lanzamiento de Jetpack 3.7.1 y 3.7.2<br \/>\n01 de octubre 2015 &#8211; Divulgaci\u00f3n Sucuri P\u00fablico de Vulnerabilidad<\/p>\n<h2><span class=\"ez-toc-section\" id=\"%C2%BFEsta_usted_en_riesgo_por_la_vulnerabilidad_XSS_en_Jetpack\"><\/span>\u00bfEst\u00e1 usted en riesgo por la <strong>vulnerabilidad<\/strong> XSS en Jetpack?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>La vulnerabilidad afecta a los usuarios de la versi\u00f3n Jetpack <strong>inferior o igual a 3,7<\/strong> que utiliza el m\u00f3dulo de formulario de contacto presente en el plugin (que se activa por defecto). Un atacante puede aprovechar este problema al proporcionar una direcci\u00f3n de correo electr\u00f3nico malicioso especialmente dise\u00f1ado en una de las p\u00e1ginas del formulario de contacto del sitio. A medida que el correo electr\u00f3nico no es verificada apropiadamente antes de ser de salida en el &#8216;Feedback&#8217; secci\u00f3n administrativa, el atacante podr\u00eda usar este error y un poco de hackery navegador web para ejecutar c\u00f3digo JavaScript en el extremo del administrador, lo que les permite hacer lo que quiera con el sitio (ocultar una puerta trasera para la futura explotaci\u00f3n del sitio hackeado, la inyecci\u00f3n de spam SEO, etc.).<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Actualizar_Jepack_lo_antes_posible\"><\/span>Actualizar Jepack lo antes posible<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Hay un par de cosas a tener en cuenta cuando se piensa acerca de esta vulnerabilidad. Cross-Site Scripting (XSS) vienen en varios sabores, unos m\u00e1s graves que otros. En la mayor\u00eda de casos, las vulnerabilidades que escuche atribuido a XSS son lo que se dice vulnerabilidades XSS reflectantes. Aqu\u00ed es donde el usuario puede hacer que algo funcione en el navegador a trav\u00e9s de una cadena URL cuidadosamente elaborada, pero est\u00e1 sucediendo en la superficie pre-verbal del sitio.<\/p>\n<p>En este caso, sin embargo, estamos hablando de una <strong>vulnerabilidad XSS<\/strong> almacenado; es decir, un visitante a su sitio web es capaz de pasar de c\u00f3digo arbitrario en el servidor web y esperar a que alguien acceda a su panel de WordPress. Esto es fundamentalmente diferente. Los usuarios que inician sesi\u00f3n en wordpress podr\u00edan ser suscriptores, autores o incluso los administradores. Los atacantes simplemente tiene que esperar a que el derecho de usuario para iniciar sesi\u00f3n, sin introducir indicadores adicionales que podr\u00edan alertar al administrador (creo que una campa\u00f1a de phishing). A esto se suma la popularidad de un plugin como JetPack, desplegado por defecto en muchas instalaciones a trav\u00e9s de sus anfitriones o los paquetes de instalaci\u00f3n.<\/p>\n<p>Esto tambi\u00e9n presenta a los lectores con un ejemplo que ilustra c\u00f3mo con el tiempo suficiente y la energ\u00eda, los bugs pueden ser identificados y explotados con fines maliciosos. Atacar extensiones de aplicaciones CMS como Jetpack (que tiene una base de m\u00e1s de 1 mill\u00f3n de instalaciones activas instalar) es una mina de oro para cualquier atacante. Es importante que usted actualice jetpack. Si por alguna raz\u00f3n no puedes, te animamos a aprovechar una pila de seguridad que le proporciona defensas pro-activas en contra no s\u00f3lo de los problemas conocidos, tambi\u00e9n de desconocidos. Le animamos a mirar las <a href=\"https:\/\/sucuri.net\/website-firewall\/signup\" target=\"_blank\" rel=\"noopener nofollow\">plataformas de protecci\u00f3n como un firewall Sitio Web o tecnolog\u00eda equivalente<\/a> que proporciona alguna forma de parches virtuales y endurecimiento para ayudar a la estancia de estas amenazas emergentes.<\/p>\n<p>&nbsp;<\/p>\n<p>Referencia: https:\/\/blog.sucuri.net\/2015\/10\/security-advisory-stored-xss-in-jetpack.html?utm_source=Sucuri+-+Main&amp;utm_campaign=8aedd3eb28-Customers_Security_advisory_Stored_XSS_Jetpack&amp;utm_medium=email&amp;utm_term=0_0b8bb56c94-8aedd3eb28-82303781<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Durante una auditor\u00eda de rutina que realiza sucuri.net, descubri\u00f3 un XSS cr\u00edtico que afecta el plugin de WordPress Jetpack, una de los [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":296,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"image","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[6],"tags":[81,52,80],"class_list":["post-340","post","type-post","status-publish","format-image","has-post-thumbnail","hentry","category-wordpress","tag-jetpack","tag-wordpress-2","tag-xss","post_format-post-format-image"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Vulnerabilidad XSS en Jetpack - ProfesionalHosting | blog<\/title>\n<meta name=\"description\" content=\"Descubierta vulnerabilidad XSS en jetpack cr\u00edtico que afecta al plugin de WordPress Jetpack, una de los plugins m\u00e1s populares en el ecosistema de WordPress.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad XSS en Jetpack - ProfesionalHosting | blog\" \/>\n<meta property=\"og:description\" content=\"Descubierta vulnerabilidad XSS en jetpack cr\u00edtico que afecta al plugin de WordPress Jetpack, una de los plugins m\u00e1s populares en el ecosistema de WordPress.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\" \/>\n<meta property=\"og:site_name\" content=\"ProfesionalHosting | blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/profesionalhosting\" \/>\n<meta property=\"article:published_time\" content=\"2015-10-02T08:16:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-25T11:36:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"631\" \/>\n\t<meta property=\"og:image:height\" content=\"194\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Antonio Torres\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@atowersg\" \/>\n<meta name=\"twitter:site\" content=\"@hostingyvps\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Antonio Torres\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\"},\"author\":{\"name\":\"Antonio Torres\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a\"},\"headline\":\"Vulnerabilidad XSS en Jetpack\",\"datePublished\":\"2015-10-02T08:16:22+00:00\",\"dateModified\":\"2023-04-25T11:36:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\"},\"wordCount\":635,\"publisher\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg\",\"keywords\":[\"jetpack\",\"wordpress\",\"xss\"],\"articleSection\":[\"WordPress\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\",\"name\":\"Vulnerabilidad XSS en Jetpack - ProfesionalHosting | blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg\",\"datePublished\":\"2015-10-02T08:16:22+00:00\",\"dateModified\":\"2023-04-25T11:36:53+00:00\",\"description\":\"Descubierta vulnerabilidad XSS en jetpack cr\u00edtico que afecta al plugin de WordPress Jetpack, una de los plugins m\u00e1s populares en el ecosistema de WordPress.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg\",\"contentUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg\",\"width\":631,\"height\":194,\"caption\":\"Vulnerabilidad XSS en Jetpack\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\/\/www.profesionalhosting.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad XSS en Jetpack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#website\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/\",\"name\":\"ProfesionalHosting | blog\",\"description\":\"Blog sobre Hosting, Ecommerce, PrestaShop, Magento, WordPress, Joomla y Drupal.\",\"publisher\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.profesionalhosting.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#organization\",\"name\":\"Profesional Hosting\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png\",\"contentUrl\":\"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png\",\"width\":360,\"height\":82,\"caption\":\"Profesional Hosting\"},\"image\":{\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/profesionalhosting\",\"https:\/\/x.com\/hostingyvps\",\"https:\/\/www.youtube.com\/channel\/UCGm-8k07wzutzxT6Upvw5tQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a\",\"name\":\"Antonio Torres\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g\",\"caption\":\"Antonio Torres\"},\"description\":\"Director t\u00e9cnico de soporte especializado en Profesionalhosting | Experto en WordPress, Ecommerce y Prestashop.\",\"sameAs\":[\"https:\/\/x.com\/atowersg\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerabilidad XSS en Jetpack - ProfesionalHosting | blog","description":"Descubierta vulnerabilidad XSS en jetpack cr\u00edtico que afecta al plugin de WordPress Jetpack, una de los plugins m\u00e1s populares en el ecosistema de WordPress.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/","og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad XSS en Jetpack - ProfesionalHosting | blog","og_description":"Descubierta vulnerabilidad XSS en jetpack cr\u00edtico que afecta al plugin de WordPress Jetpack, una de los plugins m\u00e1s populares en el ecosistema de WordPress.","og_url":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/","og_site_name":"ProfesionalHosting | blog","article_publisher":"https:\/\/www.facebook.com\/profesionalhosting","article_published_time":"2015-10-02T08:16:22+00:00","article_modified_time":"2023-04-25T11:36:53+00:00","og_image":[{"width":631,"height":194,"url":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg","type":"image\/jpeg"}],"author":"Antonio Torres","twitter_card":"summary_large_image","twitter_creator":"@atowersg","twitter_site":"@hostingyvps","twitter_misc":{"Escrito por":"Antonio Torres","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#article","isPartOf":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/"},"author":{"name":"Antonio Torres","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a"},"headline":"Vulnerabilidad XSS en Jetpack","datePublished":"2015-10-02T08:16:22+00:00","dateModified":"2023-04-25T11:36:53+00:00","mainEntityOfPage":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/"},"wordCount":635,"publisher":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg","keywords":["jetpack","wordpress","xss"],"articleSection":["WordPress"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/","url":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/","name":"Vulnerabilidad XSS en Jetpack - ProfesionalHosting | blog","isPartOf":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage"},"image":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg","datePublished":"2015-10-02T08:16:22+00:00","dateModified":"2023-04-25T11:36:53+00:00","description":"Descubierta vulnerabilidad XSS en jetpack cr\u00edtico que afecta al plugin de WordPress Jetpack, una de los plugins m\u00e1s populares en el ecosistema de WordPress.","breadcrumb":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#primaryimage","url":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg","contentUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2015\/04\/wordpress-bug.jpg","width":631,"height":194,"caption":"Vulnerabilidad XSS en Jetpack"},{"@type":"BreadcrumbList","@id":"https:\/\/www.profesionalhosting.com\/blog\/cms\/wordpress\/vulnerabilidad-xss-en-jetpack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.profesionalhosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad XSS en Jetpack"}]},{"@type":"WebSite","@id":"https:\/\/www.profesionalhosting.com\/blog\/#website","url":"https:\/\/www.profesionalhosting.com\/blog\/","name":"ProfesionalHosting | blog","description":"Blog sobre Hosting, Ecommerce, PrestaShop, Magento, WordPress, Joomla y Drupal.","publisher":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.profesionalhosting.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.profesionalhosting.com\/blog\/#organization","name":"Profesional Hosting","url":"https:\/\/www.profesionalhosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png","contentUrl":"https:\/\/www.profesionalhosting.com\/blog\/wp-content\/uploads\/2023\/04\/2x-logo.png","width":360,"height":82,"caption":"Profesional Hosting"},"image":{"@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/profesionalhosting","https:\/\/x.com\/hostingyvps","https:\/\/www.youtube.com\/channel\/UCGm-8k07wzutzxT6Upvw5tQ"]},{"@type":"Person","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/c283bfed4f721dbdec6cea7dcf671e9a","name":"Antonio Torres","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.profesionalhosting.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/87d127f5d7b133a346b65366703c0acb?s=96&d=mm&r=g","caption":"Antonio Torres"},"description":"Director t\u00e9cnico de soporte especializado en Profesionalhosting | Experto en WordPress, Ecommerce y Prestashop.","sameAs":["https:\/\/x.com\/atowersg"]}]}},"_links":{"self":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/posts\/340"}],"collection":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/comments?post=340"}],"version-history":[{"count":0,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/posts\/340\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/media\/296"}],"wp:attachment":[{"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/media?parent=340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/categories?post=340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.profesionalhosting.com\/blog\/wp-json\/wp\/v2\/tags?post=340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}