Stored XSS Vulnerability in FAQ Builder AYS by F.A.Q Builder Team

CVE-2025-24722

What is CVE-2025-24722?

The FAQ Builder AYS plugin by F.A.Q Builder Team is susceptible to a stored Cross-site Scripting (XSS) vulnerability. This occurs due to improper input handling during web page generation, allowing attackers to inject malicious scripts that can be executed in the context of a user's browser. The issue affects versions up to 1.7.3, posing significant security risks to websites utilizing this plugin. It is crucial for users to implement security patches and updates to mitigate any potential exploitation.

References