一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-19055 [HIGH] – The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape seve

未分类
📑 文章目录

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.