Advisories · Technology

wssoffice21 YMC Filter.

Every CVE that names wssoffice21 YMC Filter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109983 CVE record

CVSS 6.4 Medium

YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' Parameter
- wssoffice21 YMC Filter
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2026
CVE-2025-10289 CVE record

CVSS 5.9 Medium

Filter & Grids <= 3.2.0 - Unauthenticated SQL Injection
- wssoffice21 YMC Filter
- SQL injection
Not analysed yet 13 Dec 2025