CVE-2024-5613 is a reflected cross-site scripting vulnerability in the Formula theme for WordPress, specifically in the 'id' parameter of the 'quality_customizer_notify_dismiss_action' AJAX action. The issue is due to improper neutralization of input, allowing injection of arbitrary web scripts. This vulnerability affects all versions up to 0.5.1 and can be exploited by unauthenticated attackers who trick users into clicking malicious links. The CVSS 3.1 base score is 6.1, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction needed, and partial impact on confidentiality and integrity.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the victim's browser session, potentially leading to information disclosure or manipulation of web content. The vulnerability does not impact availability. Because it is reflected XSS, exploitation requires user interaction. There are no reports of active exploitation in the wild.

No official patch or remediation is currently available for this vulnerability. Users of the Formula theme should monitor the vendor's advisories for updates. Until a fix is released, consider disabling or restricting access to the vulnerable AJAX action if possible, or applying web application firewall (WAF) rules to detect and block malicious input targeting the 'id' parameter. Avoid clicking on suspicious links that could trigger the vulnerability.