The Schalk Burger Anonymize Links plugin versions up to 1.1 contain a CSRF vulnerability that enables Stored XSS attacks. This vulnerability allows remote attackers to trick authenticated users into submitting forged requests, which can result in malicious scripts being stored and executed in the context of the affected application. The CVSS 3.1 base score of 7.1 reflects the high severity due to the potential impact on confidentiality, integrity, and availability, combined with ease of exploitation over the network without privileges but requiring user interaction.

Successful exploitation of this vulnerability can lead to Stored XSS, which may allow attackers to execute arbitrary scripts in the context of the victim's browser, potentially leading to data theft, session hijacking, or other malicious actions. The vulnerability impacts confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting use of the affected plugin to reduce exposure. Implementing anti-CSRF tokens and validating user requests may help mitigate the risk, but these measures depend on the plugin's codebase and environment.