This vulnerability in Ays Pro Survey Maker arises from missing authorization checks due to misconfigured access control security levels. It affects versions up to and including 5.1.9.4. The issue allows users with some level of privileges to perform actions or access resources that should be restricted, potentially leading to unauthorized data disclosure. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and requires privileges but no user interaction. The impact is limited to confidentiality, with no integrity or availability impact reported.

Successful exploitation could lead to unauthorized access to sensitive information within the Survey Maker application, compromising confidentiality. There is no reported impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — no official fix or patch links are provided. Users should monitor the vendor's advisory channels for updates and apply official patches once available. Until then, review and tighten access control configurations to ensure proper authorization enforcement where possible.