Sensitive-data export via nonce-free AJAX action

Cross-site request forgery in AYS Pro Secure Copy Content Protection and Content Locking 4.9.2 and earlier allows remote attackers to export data. The ays_sccp_results_export_file AJAX action accepts a forged administrative request without nonce validation and writes email addresses, IP addresses, physical addresses, and user identifiers to a publicly accessible export file. Exploitation requires an authenticated site administrator to trigger the forged action, such as by clicking a malicious link; the attacker needs no account to retrieve the resulting file.