HIGH 7.1 NVD

CVE-2026-19055

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its publ

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.

References

https://wpscan.com/vulnerability/a1243ff3-3f0e-4068-a716-722e7cf4856b/

Published: 2026-08-19 · Source: NVD · Feed updated: 2026-08-20

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-08-19 via NVD.

vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.