CVE-2024-24804

The MW WP Form plugin versions before 5.1.0 contain a Cross Site Scripting vulnerability that was discovered by Huynh Tien Si. An attacker could exploit this flaw to inject malicious scripts into a website, enabling them to execute unauthorized code such as redirects, advertisements, or arbitrary HTML when visitors access the site. As of the advisory publication, no patched version has been made available to address this issue.

Based on public CVE data (MITRE/NVD).