All 2 CVE vulnerabilities found in SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent, with AI-generated Chinese analysis, references, and POCs.
Vendor: psmplugins
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-94539 | SupportCandy <= 3.5.3 - Authenticated (Custom+) SQL Injection via 'sort_by' Parameter CWE-89 | 6.5 | Medium | 2026-10-03 |
| CVE-2026-94378 | SupportCandy <= 3.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'name' Parameter CWE-79 | 6.4 | Medium | 2026-10-03 |
All 2 known CVE vulnerabilities affecting SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent with full Chinese analysis, references, and POCs where available.