This vulnerability in Ays Pro Photo Gallery (<= 6.3.8) arises from improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. The CVSS 3.1 score of 6.5 reflects that the vulnerability can be exploited remotely over the network with low attack complexity, requiring low privileges and user interaction. Successful exploitation can result in partial compromise of confidentiality, integrity, and availability of the affected system. No known exploits are currently reported in the wild, and no patch or remediation details are provided in the available data.

Exploitation of this DOM-based XSS vulnerability can lead to partial loss of confidentiality, integrity, and availability of the affected application or user data. The attacker requires low privileges and user interaction to exploit the vulnerability remotely. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider applying input validation or output encoding workarounds if feasible. Avoid clicking on suspicious links that may trigger the XSS. Monitor official vendor channels for updates.