Advisories · Technology
psmplugins SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent.
Every CVE that names psmplugins SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
SupportCandy <= 3.5.3 - Authenticated (Custom+) SQL Injection via 'sort_by' Parameter
- psmplugins SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent
- SQL injection
- CVSS 6.4 Medium
SupportCandy <= 3.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'name' Parameter
- psmplugins SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent
- Cross-site scripting (XSS)