The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.
2026年9月4日
CVE-2026-19055 [HIGH] – The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape seve
📑 文章目录



