PatchTheCVE: wellchoosehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-1429: Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowhttps://patchthecve.com/cve/CVE-2026-1429.htmlhttps://patchthecve.com/cve/CVE-2026-1429.htmlWed, 17 Jun 2026 10:15:46 +0000MEDIUM 5.4: Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.CVE-2026-1428: Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenhttps://patchthecve.com/cve/CVE-2026-1428.htmlhttps://patchthecve.com/cve/CVE-2026-1428.htmlWed, 17 Jun 2026 10:15:46 +0000HIGH 8.8: Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.CVE-2026-1427: Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenhttps://patchthecve.com/cve/CVE-2026-1427.htmlhttps://patchthecve.com/cve/CVE-2026-1427.htmlWed, 17 Jun 2026 10:15:46 +0000HIGH 8.8: Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.CVE-2025-8914: Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticatedhttps://patchthecve.com/cve/CVE-2025-8914.htmlhttps://patchthecve.com/cve/CVE-2025-8914.htmlWed, 17 Jun 2026 10:07:54 +0000MEDIUM 6.5: Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.CVE-2025-8913: Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenhttps://patchthecve.com/cve/CVE-2025-8913.htmlhttps://patchthecve.com/cve/CVE-2025-8913.htmlWed, 17 Jun 2026 10:07:54 +0000CRITICAL 9.8: Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.CVE-2025-8912: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthttps://patchthecve.com/cve/CVE-2025-8912.htmlhttps://patchthecve.com/cve/CVE-2025-8912.htmlWed, 17 Jun 2026 10:07:54 +0000HIGH 7.5: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.CVE-2025-8911: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowinhttps://patchthecve.com/cve/CVE-2025-8911.htmlhttps://patchthecve.com/cve/CVE-2025-8911.htmlWed, 17 Jun 2026 10:07:54 +0000MEDIUM 6.1: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.CVE-2025-8910: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowinhttps://patchthecve.com/cve/CVE-2025-8910.htmlhttps://patchthecve.com/cve/CVE-2025-8910.htmlWed, 17 Jun 2026 10:07:53 +0000MEDIUM 6.1: Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.CVE-2025-8909: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remothttps://patchthecve.com/cve/CVE-2025-8909.htmlhttps://patchthecve.com/cve/CVE-2025-8909.htmlWed, 17 Jun 2026 10:07:53 +0000MEDIUM 6.5: Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.CVE-2024-10202: Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote athttps://patchthecve.com/cve/CVE-2024-10202.htmlhttps://patchthecve.com/cve/CVE-2024-10202.htmlWed, 17 Jun 2026 06:55:09 +0000HIGH 8.8: Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.CVE-2024-10201: Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remohttps://patchthecve.com/cve/CVE-2024-10201.htmlhttps://patchthecve.com/cve/CVE-2024-10201.htmlWed, 17 Jun 2026 06:55:09 +0000HIGH 8.8: Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.CVE-2024-10200: Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated https://patchthecve.com/cve/CVE-2024-10200.htmlhttps://patchthecve.com/cve/CVE-2024-10200.htmlWed, 17 Jun 2026 06:55:09 +0000HIGH 7.5: Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.