This vulnerability (CVE-2024-43147) affects Merkulove Selection Lite through version 1.11 and involves improper input sanitization leading to stored Cross-site Scripting (CWE-79). An attacker could inject malicious scripts that are stored and later executed in the context of users visiting affected pages. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) indicates network attack vector, low attack complexity, requiring low privileges and user interaction, with scope changed and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, session hijacking, or other client-side impacts. The vulnerability affects confidentiality, integrity, and availability to a limited extent. No known active exploitation has been reported.

No official patch or remediation is currently available. Users and administrators should monitor the vendor's advisories for updates. Until a fix is released, consider applying web application firewall (WAF) rules to detect and block malicious input patterns related to XSS. Avoid using affected versions in high-risk environments and limit privileges where possible.