This vulnerability in Ays Pro Secure Copy Content Protection and Content Locking (up to version 4.4.3) is due to improper neutralization of input during web page generation, resulting in stored cross-site scripting (XSS). The CVSS 3.1 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker to inject malicious scripts that execute when a user views the affected content, potentially leading to session hijacking, data manipulation, or denial of service.

Successful exploitation can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. Since it is a stored XSS, malicious scripts can persist and affect multiple users. However, no known exploits in the wild have been reported to date.

No official patch or remediation guidance is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, consider restricting user input or applying web application firewall (WAF) rules to detect and block XSS payloads as a temporary mitigation.