CVE-2024-8981 is a reflected XSS vulnerability in the Broken Link Checker plugin for WordPress, present in all versions up to and including 2.4.0. The vulnerability arises from the use of add_query_arg in /app/admin-notices/features/class-view.php without proper escaping of URL parameters, enabling unauthenticated attackers to inject arbitrary web scripts. Exploitation requires user interaction, such as clicking a malicious link, and can lead to script execution in the context of the affected site.

Successful exploitation can lead to the execution of arbitrary scripts in the context of the affected website, potentially resulting in information disclosure, session hijacking, or other client-side impacts. The vulnerability affects confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector (C:L/I:L/A:L). No known exploits in the wild have been reported at this time.

No official patch or fix is currently available for this vulnerability as per the provided data. Users should monitor the vendor's advisory channels for updates. Until a fix is released, avoid clicking on suspicious links related to the affected plugin and consider disabling or removing the Broken Link Checker plugin if feasible to reduce risk.