This vulnerability (CVE-2025-62077) affects SEOSEON EUROPE S.L's Affiliate Link Tracker up to version 0.2. It is a stored cross-site scripting (XSS) flaw caused by improper neutralization of input during web page generation. An attacker with high privileges and the ability to trick a user into interacting with malicious content could exploit this to execute arbitrary scripts within the affected application context. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges are high, user interaction is required, scope is changed, and impacts on confidentiality, integrity, and availability are low. No patch or official remediation information is currently available.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users interacting with the vulnerable application, potentially leading to limited confidentiality, integrity, and availability impacts. The requirement for high privileges and user interaction reduces the likelihood of widespread exploitation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the application to trusted users with high privileges and exercise caution with user-generated content. Monitor vendor channels for updates regarding patches or mitigations.