CVE-2026-19056 — ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages,…
Published: 2026-08-19 · CVSS: 7.1 · CVSS 3.1
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7