This vulnerability (CVE-2024-34441) affects the Easy Affiliate Links plugin by Bootstrapped Ventures, allowing stored cross-site scripting due to improper input neutralization during web page generation. The issue impacts versions up to 3.7.2. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with impacts on confidentiality, integrity, and availability at a low to medium level. No vendor advisory or patch information is currently provided.

Successful exploitation could allow an attacker to inject and store malicious scripts that execute in the context of users' browsers, potentially leading to data disclosure, modification, or disruption of service. The CVSS score of 6.5 reflects a medium impact on confidentiality, integrity, and availability. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider limiting privileges for users who can input data into the plugin and apply web application firewall (WAF) rules to detect and block XSS payloads related to this plugin. Monitor vendor channels for updates and patches.