PatchTheCVE: organization portal systemhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-8914: Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticatedhttps://patchthecve.com/cve/CVE-2025-8914.htmlhttps://patchthecve.com/cve/CVE-2025-8914.htmlWed, 17 Jun 2026 10:07:54 +0000MEDIUM 6.5: Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.CVE-2025-8913: Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenhttps://patchthecve.com/cve/CVE-2025-8913.htmlhttps://patchthecve.com/cve/CVE-2025-8913.htmlWed, 17 Jun 2026 10:07:54 +0000CRITICAL 9.8: Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.CVE-2025-8912: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthttps://patchthecve.com/cve/CVE-2025-8912.htmlhttps://patchthecve.com/cve/CVE-2025-8912.htmlWed, 17 Jun 2026 10:07:54 +0000HIGH 7.5: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.CVE-2025-8911: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowinhttps://patchthecve.com/cve/CVE-2025-8911.htmlhttps://patchthecve.com/cve/CVE-2025-8911.htmlWed, 17 Jun 2026 10:07:54 +0000MEDIUM 6.1: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.CVE-2025-8910: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowinhttps://patchthecve.com/cve/CVE-2025-8910.htmlhttps://patchthecve.com/cve/CVE-2025-8910.htmlWed, 17 Jun 2026 10:07:53 +0000MEDIUM 6.1: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.CVE-2025-8909: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remothttps://patchthecve.com/cve/CVE-2025-8909.htmlhttps://patchthecve.com/cve/CVE-2025-8909.htmlWed, 17 Jun 2026 10:07:53 +0000MEDIUM 6.5: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.