Security Advisory

CVE-2026-19056

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 06:00:20

Last updated 2026-08-19 16:27:26

Assigner WPScan

CVSS score 7.1

State PUBLISHED

Description

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.

← Browse all CVEs View on cve.org ↗