CyberRota Analysis
AI-GeneratedThe ProSolution WP Client plugin for WordPress prior to version 2.0.11 is vulnerable to reflected Cross-Site Scripting due to inadequate sanitization and escaping of parameters in HTML attributes. This flaw allows attackers to execute malicious scripts in the context of any visitor, including administrators, potentially compromising user sessions and sensitive data. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator.