CVE-2026-66460

AfterShip Tracking versions up to 1.18.1 are vulnerable to a Subscriber Cross Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to unauthorized actions or data exposure for users interacting with the affected application. Organizations utilizing AfterShip Tracking should prioritize patching this vulnerability to mitigate potential security risks.