This vulnerability involves improper neutralization of input in the rachanaS Sponsered Link product, leading to a reflected cross-site scripting (XSS) issue. An attacker can craft a malicious URL that, when visited by a user, causes the execution of arbitrary scripts in the user's browser. The affected versions include all versions up to 4.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided.

Successful exploitation of this vulnerability can lead to the execution of arbitrary scripts in the context of the victim's browser, potentially allowing theft of user data, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The CVSS score of 7.1 reflects a high severity level, but no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider applying input validation and output encoding controls on their own if possible. Monitor official vendor channels for updates and apply fixes promptly once released.