This vulnerability in Ays Pro Quiz Maker allows an attacker with network access and no privileges to retrieve sensitive system information embedded within the application. The affected versions include all up to and including 6.7.0.65. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality loss without affecting integrity or availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

An attacker can remotely access sensitive system information embedded in the Quiz Maker application without authentication or user interaction. This exposure could aid further attacks or information gathering but does not directly impact system integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected application to trusted users only and monitor for unusual access patterns related to sensitive information retrieval.