CVE-2026-73358

The vulnerability allows unauthenticated cross-site scripting (XSS) in Affiliates Manager versions up to 2.9.53, potentially enabling attackers to execute arbitrary scripts in the context of a user's session. This could lead to data theft, session hijacking, or other malicious activities. Organizations using affected versions should prioritize remediation to protect user data and maintain application integrity.