This vulnerability (CVE-2024-43993) in CryoutCreations Liquido is a stored XSS issue caused by improper input neutralization during web page generation. It affects Liquido versions through 1.0.1.2. The CVSS 3.1 base score is 6.5 with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L, indicating network attack vector, low attack complexity, requiring low privileges and user interaction, with scope changed and low impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor.

Successful exploitation allows an attacker to inject and store malicious scripts that execute in the context of other users' browsers, potentially leading to information disclosure, session hijacking, or other client-side impacts. The vulnerability affects confidentiality, integrity, and availability at a low level. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor vendor channels for updates and patches.