SupportCandy Vulnerabilities

2 vulnerabilities related to SupportCandy

PoC2025-08-01CVE-2023-1730: SupportCandy < 3.1.5 - Unauthenticated SQL Injection
PoC2025-08-01CVE-2021-24878: SupportCandy < 2.2.7 - Reflected Cross-Site Scripting