← CVE Intelligence

CVE-2026-19056

ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter PUBLISHED

Description (CNA)

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.

Affected (CNA)

Vendor / productVersions
Unknown / ProSolution WP Clientaffected 0 before 2.0.11

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.