Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WellChoose Component: Single Sign-on Portal System Clear all filters
TI-2026-01127 CVE-2026-1429 · GHSA-c6cx-98fx-j4rp

WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting

Priority LOW 22

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing at…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00243 Published 2026-01-26 Fixed in IFTOP_P4_181 CWE-79
TI-2026-01126 CVE-2026-1428 · GHSA-673g-gvq6-jf92

WellChoose｜Single Sign-On Portal System - OS Command Injection

Priority MEDIUM 42

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01376 Published 2026-01-26 Fixed in IFTOP_P4_181 CWE-78
TI-2026-01125 CVE-2026-1427 · GHSA-p4xg-6jp2-m2x3

WellChoose｜Single Sign-On Portal System - OS Command Injection

Priority MEDIUM 42

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01403 Published 2026-01-26 Fixed in IFTOP_P4_181 CWE-78