This vulnerability in Ays Pro FAQ Builder AYS (<= 1.7.3) involves improper input sanitization during web page generation, leading to stored cross-site scripting (XSS). An attacker could inject malicious scripts that persist in the application and execute when viewed by other users. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction needed, and impacts on confidentiality, integrity, and availability at a low level. No patch or official remediation details are provided in the available data.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute malicious scripts in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability is classified as medium severity with a CVSS score of 5.9. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to high-privilege users and limit exposure to untrusted input. Monitor for updates from the vendor regarding patches or mitigations.