Psm Plugins

5 CVEs across 1 Psm Plugins products. Browse Psm Plugins vulnerabilities, severities, and proof-of-concept exploits.

Psm Plugins products with known CVEs

ProductCVEs
Supportcandy5
Psm Plugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73350High8.22026-08-18Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.
CVE-2026-57711Medium6.52026-07-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored XSS.T…
CVE-2026-54826High7.62026-06-26Subscriber Insecure Direct Object References (IDOR) in SupportCandy <= 3.4.6 versions.
CVE-2026-25321Medium5.32026-02-19Missing Authorization vulnerability in PSM Plugins SupportCandy supportcandy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-67598Medium4.32025-12-09Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cross Site Request Forgery.This issue affects SupportCandy: fro…