CVE-2026-32575

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in SUMO Affiliates Pro versions up to 11.7.0, allowing attackers to inject malicious scripts into web pages viewed by users. This can lead to session hijacking, data theft, or defacement of the site, posing a significant risk to user trust and data integrity. Organizations using affected versions should prioritize remediation to mitigate potential exploitation.