Stored XSS Vulnerability in FAQ Builder AYS by F.A.Q Builder Team

CVE-2025-24722

What is CVE-2025-24722?

The FAQ Builder AYS plugin by F.A.Q Builder Team is susceptible to a stored Cross-site Scripting (XSS) vulnerability. This occurs due to improper input handling during web page generation, allowing attackers to inject malicious scripts that can be executed in the context of a user's browser. The issue affects versions up to 1.7.3, posing significant security risks to websites utilizing this plugin. It is crucial for users to implement security patches and updates to mitigate any potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References