CVE-2026-19055 — ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading…
Published: 2026-08-19 · CVSS: 7.1 · CVSS 3.1
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7