{"id":2735,"date":"2024-06-18T23:29:28","date_gmt":"2024-06-18T22:29:28","guid":{"rendered":"https:\/\/chiptochip.es\/blog\/?p=2735"},"modified":"2024-07-29T18:24:37","modified_gmt":"2024-07-29T17:24:37","slug":"multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme","status":"publish","type":"post","link":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/","title":{"rendered":"Multiple Themes (Various Versions) &#8211; Reflected Cross-Site Scripting &#8211; Impreza theme"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">XSS Attacks (Cross-site scripting)<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/impreza-theme-refleted-Cross-site-1024x449.png\" alt=\"\" class=\"wp-image-2737\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Mensaje error WPToolkit<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Multiple themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the &#8216;id&#8217; parameter found in the &#8216;[different-value]_customizer_notify_dismiss_action&#8217; and &#8216;[different-value]_customizer_notify_dismiss_recommended_plugins&#8217; AJAX actions in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. The following are additional known variants of the AJAX actions: &#8216;[different-value]_customizer_notify_dismiss_recommended_action_callback&#8217; &amp; &#8216;[different-value]_customizer_notify_dismiss_recommended_plugins_callback&#8217;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Medida de seguridad 1: agregar el siguiente c\u00f3digo a tu archivo .htaccess en el directorio ra\u00edz de WP<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>Options +FollowSymLinks\nRewriteEngine On\nRewriteCond %{QUERY_STRING} (\\&lt;|%3C).*script.*(\\&gt;|%3E) &#91;NC,OR]\nRewriteCond %{QUERY_STRING} GLOBALS(=|\\&#91;|\\%&#91;0-9A-Z]{0,2}) &#91;OR]\nRewriteCond %{QUERY_STRING} _REQUEST(=|\\&#91;|\\%&#91;0-9A-Z]{0,2})\nRewriteRule ^(.*)$ index.php &#91;F,L]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Medida de seguridad 2: <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Los ataques XSS permiten a los atacantes inyectar c\u00f3digo JavaScript malicioso en las p\u00e1ginas de su sitio web, lo que puede resultar en robo de datos o acciones no autorizadas. En este tipo de ataque, las vulnerabilidades de la web suelen aprovecharse para insertar c\u00f3digo malicioso, lo que les permite tomar el control del sitio web o robar informaci\u00f3n confidencial de los usuarios que visitan el sitio.<br>Para evitar estos ataques, aseg\u00farese de validar y filtrar adecuadamente las entradas de los usuarios y utilizar medidas de seguridad como la <strong>Pol\u00edtica de seguridad de contenido (CSP).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Un administrador del sitio web desea que todo el contenido provenga del mismo origen que el del sitio (esto excluye subdominios).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"ejemplo_2\">Ejemplo 1<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Un administrador del sitio web desea que todo el contenido provenga del mismo origen que el del sitio (esto excluye subdominios).<br><br>Content-Security-Policy: default-src &#8216;self&#8217;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"ejemplo_2\">Ejemplo 2<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">El administrador de un sitio web desea permitir el contenido de un dominio de confianza y todos sus subdominios (no tiene que ser el mismo dominio en el que est\u00e1 configurado el CSP).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"ejemplo_2\">Ejemplo 3<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">Content-Security-Policy: default-src 'self' *.trusted.com<br><br><br>El administrador de un sitio web desea permitir que los usuarios de una aplicaci\u00f3n web incluyan im\u00e1genes de cualquier origen en su propio contenido, pero restringen los medios de audio o video a proveedores de confianza, y todas las secuencias de comandos solo a un servidor espec\u00edfico que aloja un c\u00f3digo de confianza.<br><br>Content-Security-Policy: default-src 'self'; img-src *; media-src media1.com media2.com; script-src userscripts.example.com<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>XSS Attacks (Cross-site scripting) Mensaje error WPToolkit Multiple themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the &#8216;id&#8217; parameter found in the &#8216;[different-value]_customizer_notify_dismiss_action&#8217; and &#8216;[different-value]_customizer_notify_dismiss_recommended_plugins&#8217; AJAX actions in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that [&hellip;]<\/p>\n","protected":false},"author":37,"featured_media":2736,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-2735","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Multiple Themes (Various Versions) - Reflected Cross-Site Scripting - Impreza theme - Blog - ChipToChip | Servicios inform\u00e1ticos Valencia<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Multiple Themes (Various Versions) - Reflected Cross-Site Scripting - Impreza theme - Blog - ChipToChip | Servicios inform\u00e1ticos Valencia\" \/>\n<meta property=\"og:description\" content=\"XSS Attacks (Cross-site scripting) Mensaje error WPToolkit Multiple themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the &#8216;id&#8217; parameter found in the &#8216;[different-value]_customizer_notify_dismiss_action&#8217; and &#8216;[different-value]_customizer_notify_dismiss_recommended_plugins&#8217; AJAX actions in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/ChipToChipRuzafa\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-18T22:29:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-29T17:24:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/XSS-Attacks-Cross-site-scripting.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"735\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Elena\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elena\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/\"},\"author\":{\"name\":\"Elena\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#\\\/schema\\\/person\\\/ea323336cdc95da39913240398996c5f\"},\"headline\":\"Multiple Themes (Various Versions) &#8211; Reflected Cross-Site Scripting &#8211; Impreza theme\",\"datePublished\":\"2024-06-18T22:29:28+00:00\",\"dateModified\":\"2024-07-29T17:24:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/\"},\"wordCount\":322,\"publisher\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/XSS-Attacks-Cross-site-scripting-png.webp\",\"articleSection\":[\"Wordpress\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/\",\"url\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/\",\"name\":\"Multiple Themes (Various Versions) - Reflected Cross-Site Scripting - Impreza theme - Blog - ChipToChip | Servicios inform\u00e1ticos Valencia\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/XSS-Attacks-Cross-site-scripting-png.webp\",\"datePublished\":\"2024-06-18T22:29:28+00:00\",\"dateModified\":\"2024-07-29T17:24:37+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#primaryimage\",\"url\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/XSS-Attacks-Cross-site-scripting-png.webp\",\"contentUrl\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/XSS-Attacks-Cross-site-scripting-png.webp\",\"width\":1344,\"height\":735,\"caption\":\"XSS Attacks (Cross-site scripting)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/2024\\\/06\\\/18\\\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Multiple Themes (Various Versions) &#8211; Reflected Cross-Site Scripting &#8211; Impreza theme\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/\",\"name\":\"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia\",\"description\":\"Manuales r\u00e1pidos de uso interno especialmente sobre errores web\",\"publisher\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#organization\",\"name\":\"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia\",\"url\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/cropped-logo-informatica-png.webp\",\"contentUrl\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/cropped-logo-informatica-png.webp\",\"width\":348,\"height\":186,\"caption\":\"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia\"},\"image\":{\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/#\\\/schema\\\/person\\\/ea323336cdc95da39913240398996c5f\",\"name\":\"Elena\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7e1ec7b47a216e361e271c5b3d2ceed4ab0ae6f3199752811b466cfa44c96d09?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7e1ec7b47a216e361e271c5b3d2ceed4ab0ae6f3199752811b466cfa44c96d09?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7e1ec7b47a216e361e271c5b3d2ceed4ab0ae6f3199752811b466cfa44c96d09?s=96&r=g\",\"caption\":\"Elena\"},\"description\":\"Elena Lacalle es ingeniera inform\u00e1tica, perito judicial y fundadora de ChipToChip. Especializada en automatizaci\u00f3n, desarrollo web profesional y ciberseguridad, lidera el ecosistema de servicios tecnol\u00f3gicos de la marca, incluyendo proyectos de WordPress avanzado, IA aplicada, mantenimiento t\u00e9cnico y auditor\u00edas digitales. Su enfoque combina precisi\u00f3n t\u00e9cnica con soluciones escalables para empresas, despachos jur\u00eddicos y entornos de alta exigencia operativa.\",\"sameAs\":[\"https:\\\/\\\/chiptochip.es\",\"https:\\\/\\\/www.facebook.com\\\/ChipToChipRuzafa\\\/\"],\"url\":\"https:\\\/\\\/chiptochip.es\\\/blog\\\/author\\\/chiptochip\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Multiple Themes (Various Versions) - Reflected Cross-Site Scripting - Impreza theme - Blog - ChipToChip | Servicios inform\u00e1ticos Valencia","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/","og_locale":"es_ES","og_type":"article","og_title":"Multiple Themes (Various Versions) - Reflected Cross-Site Scripting - Impreza theme - Blog - ChipToChip | Servicios inform\u00e1ticos Valencia","og_description":"XSS Attacks (Cross-site scripting) Mensaje error WPToolkit Multiple themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the &#8216;id&#8217; parameter found in the &#8216;[different-value]_customizer_notify_dismiss_action&#8217; and &#8216;[different-value]_customizer_notify_dismiss_recommended_plugins&#8217; AJAX actions in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that [&hellip;]","og_url":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/","og_site_name":"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia","article_author":"https:\/\/www.facebook.com\/ChipToChipRuzafa\/","article_published_time":"2024-06-18T22:29:28+00:00","article_modified_time":"2024-07-29T17:24:37+00:00","og_image":[{"width":1344,"height":735,"url":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/XSS-Attacks-Cross-site-scripting.png","type":"image\/png"}],"author":"Elena","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Elena","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#article","isPartOf":{"@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/"},"author":{"name":"Elena","@id":"https:\/\/chiptochip.es\/blog\/#\/schema\/person\/ea323336cdc95da39913240398996c5f"},"headline":"Multiple Themes (Various Versions) &#8211; Reflected Cross-Site Scripting &#8211; Impreza theme","datePublished":"2024-06-18T22:29:28+00:00","dateModified":"2024-07-29T17:24:37+00:00","mainEntityOfPage":{"@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/"},"wordCount":322,"publisher":{"@id":"https:\/\/chiptochip.es\/blog\/#organization"},"image":{"@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#primaryimage"},"thumbnailUrl":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/XSS-Attacks-Cross-site-scripting-png.webp","articleSection":["Wordpress"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/","url":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/","name":"Multiple Themes (Various Versions) - Reflected Cross-Site Scripting - Impreza theme - Blog - ChipToChip | Servicios inform\u00e1ticos Valencia","isPartOf":{"@id":"https:\/\/chiptochip.es\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#primaryimage"},"image":{"@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#primaryimage"},"thumbnailUrl":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/XSS-Attacks-Cross-site-scripting-png.webp","datePublished":"2024-06-18T22:29:28+00:00","dateModified":"2024-07-29T17:24:37+00:00","breadcrumb":{"@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#primaryimage","url":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/XSS-Attacks-Cross-site-scripting-png.webp","contentUrl":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2024\/06\/XSS-Attacks-Cross-site-scripting-png.webp","width":1344,"height":735,"caption":"XSS Attacks (Cross-site scripting)"},{"@type":"BreadcrumbList","@id":"https:\/\/chiptochip.es\/blog\/2024\/06\/18\/multiple-themes-various-versions-reflected-cross-site-scripting-impreza-theme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/chiptochip.es\/blog\/"},{"@type":"ListItem","position":2,"name":"Multiple Themes (Various Versions) &#8211; Reflected Cross-Site Scripting &#8211; Impreza theme"}]},{"@type":"WebSite","@id":"https:\/\/chiptochip.es\/blog\/#website","url":"https:\/\/chiptochip.es\/blog\/","name":"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia","description":"Manuales r\u00e1pidos de uso interno especialmente sobre errores web","publisher":{"@id":"https:\/\/chiptochip.es\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/chiptochip.es\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/chiptochip.es\/blog\/#organization","name":"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia","url":"https:\/\/chiptochip.es\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/chiptochip.es\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2018\/05\/cropped-logo-informatica-png.webp","contentUrl":"https:\/\/chiptochip.es\/blog\/wp-content\/uploads\/2018\/05\/cropped-logo-informatica-png.webp","width":348,"height":186,"caption":"Blog - ChipToChip | Servicios inform\u00e1ticos Valencia"},"image":{"@id":"https:\/\/chiptochip.es\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/chiptochip.es\/blog\/#\/schema\/person\/ea323336cdc95da39913240398996c5f","name":"Elena","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/7e1ec7b47a216e361e271c5b3d2ceed4ab0ae6f3199752811b466cfa44c96d09?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7e1ec7b47a216e361e271c5b3d2ceed4ab0ae6f3199752811b466cfa44c96d09?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7e1ec7b47a216e361e271c5b3d2ceed4ab0ae6f3199752811b466cfa44c96d09?s=96&r=g","caption":"Elena"},"description":"Elena Lacalle es ingeniera inform\u00e1tica, perito judicial y fundadora de ChipToChip. Especializada en automatizaci\u00f3n, desarrollo web profesional y ciberseguridad, lidera el ecosistema de servicios tecnol\u00f3gicos de la marca, incluyendo proyectos de WordPress avanzado, IA aplicada, mantenimiento t\u00e9cnico y auditor\u00edas digitales. Su enfoque combina precisi\u00f3n t\u00e9cnica con soluciones escalables para empresas, despachos jur\u00eddicos y entornos de alta exigencia operativa.","sameAs":["https:\/\/chiptochip.es","https:\/\/www.facebook.com\/ChipToChipRuzafa\/"],"url":"https:\/\/chiptochip.es\/blog\/author\/chiptochip\/"}]}},"_links":{"self":[{"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/posts\/2735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/users\/37"}],"replies":[{"embeddable":true,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/comments?post=2735"}],"version-history":[{"count":3,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/posts\/2735\/revisions"}],"predecessor-version":[{"id":2747,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/posts\/2735\/revisions\/2747"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/media\/2736"}],"wp:attachment":[{"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/media?parent=2735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/categories?post=2735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chiptochip.es\/blog\/wp-json\/wp\/v2\/tags?post=2735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}