ProSolution WP Client vulnerabilities
4 known vulnerabilities in ProSolution WP Client from ProSolution WP Client. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
ProSolution WP Client: Improper Neutralization of Input During Web Page Generation
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administr
- 7.1 High severity
ProSolution WP Client: Improper Neutralization of Input During Web Page Generation
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, inclu
- 9.1 Critical severity
ProSolution WP Client: Improper Neutralization of Special Elements used in an SQL Command
The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.
- 8.6 High severity
ProSolution WP Client: Improper Neutralization of Special Elements used in an SQL Command
The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on every request without any authentication or capability check, allowing unauthenticated users to read arbitrary