This vulnerability in Arjan Olsder SEO Auto Linker (versions <= 1.5.3) involves improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). An attacker with high privileges can inject malicious scripts that are stored and later executed in the context of users viewing the affected pages. The CVSS 3.1 score of 5.9 reflects a medium severity with network attack vector, low attack complexity, required privileges, and user interaction. No patch or official fix information is currently available, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the browsers of users who view the affected content. This can lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, exploitation requires user interaction and elevated privileges, reducing the overall risk. There are no known active exploits in the wild.

Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege access to the plugin and avoid exposing vulnerable versions in untrusted environments. Monitor vendor channels for updates and apply patches promptly once released.