Skip to content
Sign in
7.1 High

CVE-2026-25346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ Builder AYS faq-builder-ays allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FAQ Builder AYS: from n/a through <= 1.8.2.

Affected products and versions

Product Affected versions Fixed in
FAQ Builder AYS 1.8 earliest → 1.8.2 No fix stated

Other CVEs of FAQ Builder AYS

The 3 CVEs of FAQ Builder AYS →
CVE-2025-24722 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro FAQ… 5.9 Medium CVE-2021-24461 The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the… Not rated
Track this CVE