Wellchoose Single Sign-on Portal System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Wellchoose Single Sign-on Portal System: 3 record(s), with affected versions and fixes.cpe:2.3:a:wellchoose:single_sign-on_portal_system
CVE-2026-1429
Medium · 5.4
CWE-79 Jan 26, 2026
WellChoose|Single Sign-On Portal System - Reflected Cross-site Scripting
Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.
CVE-2026-1428
High · 8.8
CWE-78 Jan 26, 2026
WellChoose|Single Sign-On Portal System - OS Command Injection
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.
CVE-2026-1427
High · 8.8
CWE-78 Jan 26, 2026
WellChoose|Single Sign-On Portal System - OS Command Injection
Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.