Search vulnerabilities

Results 3

Export CSV
CVE-2026-1427

WellChoose|Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0 · 8.7 High EPSS 1.4% KEV · Not listed
Vendors
CVE-2026-1429

WellChoose|Single Sign-On Portal System - Reflected Cross-site Scripting

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors