Missing Authorization Vulnerability in Ays Pro Survey Maker from Ays Pro

CVE-2025-64276

What is CVE-2025-64276?

Ays Pro Survey Maker has a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This flaw can potentially lead to unauthorized access for users, enabling them to manipulate survey data or gain insights that they shouldn't have access to, affecting data integrity and user privacy. The issue affects versions of Survey Maker from the earliest release through 5.1.9.4.

References