Skip to content
OpenAdvisories

Vendor

WellChoose

16 known vulnerabilities.

Products

Organization Portal System 6 IFTOP 3 Single Sign-On Portal System 3 Administrative Management System 3 BatchSignCS 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-3825

    WellChoose｜IFTOP - Reflected Cross-site Scripting

    IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

    WellChoose IFTOP
  • Medium 6.1
    CVE-2026-3824

    WellChoose｜IFTOP - Open redirect

    IFTOP developed by WellChoose has an Open redirect vulnerability, allowing authenticated remote attackers to craft a URL that tricks users into visiting malicious website.

    WellChoose IFTOP
  • Medium 5.4
    CVE-2026-1429

    WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting

    Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

    WellChoose Single Sign-On Portal System
  • Medium 6.5
    CVE-2025-8914

    WellChoose｜Organization Portal System - SQL Injection

    Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

    WellChoose Organization Portal System
  • Medium 6.1
    CVE-2025-8911

    WellChoose｜Organization Portal System - Reflected Cross-site Scripting

    Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

    WellChoose Organization Portal System
  • Medium 6.1
    CVE-2025-8910

    WellChoose｜Organization Portal System - Reflected Cross-site Scripting

    Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

    WellChoose Organization Portal System
  • Medium 6.5
    CVE-2025-8909

    WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal

    Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

    WellChoose Organization Portal System