The vulnerability CVE-2024-24874 in CodePeople CP Polls is classified as CWE-80, indicating improper neutralization of script-related HTML tags in a web page. This allows an attacker to inject malicious code into the application, leading to a basic cross-site scripting (XSS) attack. The CVSS v3.1 base score is 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction needed, and impact limited to integrity. The affected versions include all versions up to 1.0.71. No patch or official remediation level has been disclosed by the vendor as of the publication date.

The vulnerability allows an attacker to inject malicious scripts into the web pages served by CP Polls, potentially compromising the integrity of the application. This could lead to unauthorized code execution in the context of the victim's browser, but does not impact confidentiality or availability. There are no known active exploits reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation or output encoding workarounds if feasible. Monitor official CodePeople communications for updates on patches or mitigations.