Read the docs

WellChoose

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

WellChoose records in CISA KEV

No WellChoose vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Organization Portal System 9 records MEDIUM Administrative Management System 3 records MEDIUM Single Sign-on Portal System 3 records MEDIUM

Records

3 records in Single Sign-on Portal System · all components

TI-2026-01126 CVE-2026-1428 · GHSA-673g-gvq6-jf92

WellChoose｜Single Sign-On Portal System - OS Command Injection

Priority MEDIUM 42

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01376 Published 2026-01-26 Fixed in IFTOP_P4_181 CWE-78
TI-2026-01125 CVE-2026-1427 · GHSA-p4xg-6jp2-m2x3

WellChoose｜Single Sign-On Portal System - OS Command Injection

Priority MEDIUM 42

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01403 Published 2026-01-26 Fixed in IFTOP_P4_181 CWE-78
TI-2026-01127 CVE-2026-1429 · GHSA-c6cx-98fx-j4rp

WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting

Priority LOW 22

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing at…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00243 Published 2026-01-26 Fixed in IFTOP_P4_181 CWE-79
Open these records in search →