CVE-2025-58014 is a CSRF vulnerability affecting Ays Pro Quiz Maker through version 6.7.0.64. The vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests to the application, potentially causing limited integrity impact without affecting confidentiality or availability. The CVSS v3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially modifying data or settings within the Quiz Maker application. There is no impact on confidentiality or availability reported. The overall severity is medium based on the CVSS score of 4.3.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided, users should monitor for updates from Ays Pro and apply any official fixes once available. Until then, consider implementing CSRF protections such as verifying anti-CSRF tokens in requests if possible.