CVE-2024-24804

CVE-2024-24804 affects MW WP Form (WordPress). The vulnerability is a Stored XSS due to improper input neutralization during web page generation, impacting MW WP Form versions up to 5.0.6. Remediation: upgrade to MW WP Form 5.1.0 (per Patchstack) to address the issue. Exploitation status is not p...

WordPress MW WP Form Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)

Software MW WP Form Type Plugin Vulnerable versions = 5.0.6 Fixed in 5.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24804 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a4c6865d5010 Credits Huynh Tien Si Required privilege Editor...