CVE-2026-19055

The ProSolution WP Client WordPress plugin before version 2.0.11 fails to sanitise and escape multiple parameters before reflecting them into HTML attributes on public pages, enabling reflected XSS exploitable against any visitor, including administrators. CVSS 3.1 scores this HIGH (7.1); no in-t...