Skip to content

psmplugins SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent

CVE-2026-94539 Medium 6.5 SupportCandy <= 3.5.3 - Authenticated (Custom+) SQL Injection via 'sort_by' Parameter 0.3%
CVE-2026-94378 Medium 6.4 SupportCandy <= 3.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'name' Parameter 0.2%