This vulnerability in Ays Pro Survey Maker allows an attacker with high privileges and requiring user interaction to inject malicious scripts that are stored and later executed when other users access the affected survey pages. The improper input neutralization during web page generation leads to a stored XSS condition. The vulnerability affects versions up to 5.1.3.5. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users viewing the affected survey pages, potentially leading to information disclosure, session hijacking, or other impacts related to script execution. The impact is rated as medium severity with low confidentiality, integrity, and availability impacts. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and limit user interaction with untrusted content. Monitor vendor communications for updates on patches or mitigations specific to this vulnerability.