Skip to content
OpenAdvisories

Product · Ays Pro

FAQ Builder AYS

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-24722

    WordPress FAQ Builder AYS Plugin <= 1.7.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Stored XSS.This issue affects FAQ Builder AYS: from n/a through <= 1.7.3.

    Ays Pro FAQ Builder AYS
  • Medium 6.1
    CVE-2024-11458

    FAQ Builder AYS <= 1.7.1 - Reflected Cross-Site Scripting

    The FAQ Builder AYS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ays_faq_tab' parameter in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthe…

    Ays Pro FAQ Builder AYS Web / CMS