CVE-2024-24707 is an improper control of code generation vulnerability classified under CWE-94 in the Cwicly product by Cwicly Builder, SL. It affects versions up to 1.4.0.2 and allows code injection, which can lead to remote code execution. The vulnerability has a CVSS 3.1 base score of 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor, and it is not a cloud service. No known active exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker with low privileges to execute arbitrary code remotely, resulting in full compromise of the affected system's confidentiality, integrity, and availability. This represents a critical security risk for users of affected versions of Cwicly.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected application to trusted users only and monitor for suspicious activity related to code injection attempts. Avoid exposing the vulnerable application to untrusted networks where possible.