CVE-2024-22149 is a Cross-Site Scripting (XSS) vulnerability in the CformsII plugin, potentially allowing attackers to inject malicious scripts into web pages. Specifically, this is a Stored XSS vulnerability, impacting versions up to 15.0.5. Although the CVSS score is 0, indicating a base severity of none, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a moderate level of risk based on real-world threat intelligence.

This XSS vulnerability allows attackers to inject malicious JavaScript into the CformsII plugin's web page generation. Successful exploitation could lead to user session hijacking, defacement of websites, or redirection to malicious sites. Despite the lower CVSS score, the presence of the 'In The Wild' tag and an SVRS score of 30 indicate that this vulnerability should be addressed to mitigate potential risks, especially if CformsII is being actively used.