CVE-2025-62039
Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.6.6.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 1.25%
- CWE
- CWE-201
- Published
- 2025-11-06
- Last modified
- 2026-04-28
Affected products
- Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS
- Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS
Weakness type
Related vulnerabilities
- CVE-2026-87015 — Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
- CVE-2026-65812 — Microsoft Teams for Android Information Disclosure Vulnerability
- CVE-2026-86505 — In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...
- CVE-2026-86497 — In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed...
- CVE-2026-85307 — WordPress KP Agent Ready plugin < 1.2.08 - Sensitive Data Exposure vulnerability
- CVE-2026-77123 — Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API
- CVE-2026-81162 — DXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112
- CVE-2026-81280 — WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability