Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted request.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19056 Reflected Cross-Site Scripting in ProSolution WP Client WordPress Plugin Before 2.0.11 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19056
Post summary
The entry announces a reflected XSS vulnerability in ProSolution WP Client (pre‑2.0.11) but provides no PoC, exploit, active‑exploitation evidence, or patch details.
🚨*CVE* CVE-2026-19056 The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administra… https://www.cve.org/CVERecord?id=CVE-2026-19056 ----- Traducción: CVE-2026-19056 El … https://infoflow.cloud`
Post summary
The post discloses CVE‑2026‑19056, noting that the ProSolution WP Client WordPress plugin before 2.0.11 fails to sanitise a parameter used in an HTML attribute, creating a vulnerability. No exploit, PoC, or patch details are provided.
CVE-2026-19056 The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administra… https://www.cve.org/CVERecord?id=CVE-2026-19056
Post summary
CVE-2026-19056 details an unsanitized input reflected into an HTML attribute in old versions of the ProSolution WP Client plugin.