The ProSolution WP Client WordPress plugin versions prior to 2.0.11 contain a reflected XSS vulnerability due to improper sanitization and escaping of a parameter reflected into an HTML attribute on an admin page. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript in the administrator's browser session, potentially leading to session hijacking or other malicious actions within the admin context.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of an administrator's session, which can lead to information disclosure, session hijacking, or other actions with administrative privileges. The CVSS score of 7.1 indicates a high severity impact with network attack vector, low attack complexity, no privileges required, but user interaction needed, and impacts on confidentiality, integrity, and availability.

Upgrade the ProSolution WP Client plugin to version 2.0.11 or later where this vulnerability is fixed. Since the vulnerability is addressed in the newer version, applying this official fix is the recommended remediation.