This vulnerability in Rajesh Broken Links Remover (versions up to 1.2.2) is a CSRF issue that enables stored XSS attacks. An attacker can exploit this by inducing a victim to perform unintended actions that store malicious scripts within the application context. The vulnerability has a CVSS 3.1 base score of 7.1, reflecting its high severity with potential impacts on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker to execute stored malicious scripts in the context of users interacting with the Broken Links Remover plugin, potentially leading to data compromise, session hijacking, or other impacts affecting confidentiality, integrity, and availability. The vulnerability requires user interaction but no privileges, and can be triggered remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted content and consider disabling or restricting access to the Broken Links Remover plugin to mitigate risk.