This vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS allows an attacker to insert sensitive information into data sent by the application, which can then be retrieved by unauthorized parties. It affects versions up to and including 2.6.6. The CVSS 3.1 score of 7.5 reflects a high-severity issue with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality compromise, with no integrity or availability impact reported. No patch or remediation information is currently available.

The vulnerability enables unauthorized retrieval of sensitive data embedded in sent data by the affected chatbot application, compromising confidentiality. There is no reported impact on data integrity or system availability. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when deploying or using affected versions of the product. Monitor vendor communications for updates on patches or mitigations.