This vulnerability (CVE-2024-22287) in the Better Anchor Links plugin allows an attacker to perform CSRF attacks that result in XSS. The affected versions include all versions up to 1.7.5. The CVSS 3.1 score of 7.1 indicates a high severity issue with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No official fix or patch has been published yet, and the vendor has not provided remediation details.

Successful exploitation of this vulnerability could allow an attacker to execute unauthorized actions on behalf of an authenticated user via CSRF, leading to Cross-Site Scripting attacks. This can compromise user data confidentiality, integrity, and availability within the context of the affected plugin. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the Better Anchor Links plugin if feasible, or applying any available temporary mitigations such as CSRF protection mechanisms at the application level. Monitor vendor channels for updates.