This vulnerability in Ays Pro Quiz Maker allows an attacker to expose sensitive system information without authorization. It affects all versions up to and including 6.7.0.65. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to confidentiality loss, with no impact on integrity or availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

An attacker can retrieve sensitive system information from affected versions of Ays Pro Quiz Maker, potentially aiding further attacks or reconnaissance. The confidentiality of system data is compromised, but there is no direct impact on system integrity or availability. There are no reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the Quiz Maker application to trusted users only and monitor for unusual access patterns related to sensitive data retrieval.