Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SupportCandy – Helpdesk & Customer Support Ticket System — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in SupportCandy – Helpdesk & Customer Support Ticket System, with AI-generated Chinese analysis, references, and POCs.

Vendor: psmplugins

CVE IDTitleCVSSSeverityPublished
CVE-2026-1251 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference CWE-639 5.4 Medium2026-01-31
CVE-2026-0683 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) SQL Injection via Number Field Filter CWE-89 6.5 Medium2026-01-31
CVE-2025-10658 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover CWE-307 6.5 Medium2025-09-20
CVE-2024-13552 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference CWE-285 4.3 Medium2025-03-07

All 4 known CVE vulnerabilities affecting SupportCandy – Helpdesk & Customer Support Ticket System with full Chinese analysis, references, and POCs where available.