CVE-2025-8911

CVE-2025-8911 concerns WellChoose’s Organization Portal System, which is affected by a reflected XSS vulnerability. The issue allows unauthenticated attackers to cause arbitrary JavaScript execution in a user’s browser via phishing-style input. Public references across CNVD/NVD/Red Hat and others...

CVE-2025-8912

CVE-2025-8912 affects WellChoose Organization Portal System with an Arbitrary File Reading vulnerability via Absolute Path Traversal. Public data describes an unauthenticated remote attacker being able to download arbitrary system files. The CVE metrics indicate NETWORK access, low attack complex...

CVE-2026-3826

The CVE concerns IFTOP by WellChoose, which has a Local File Inclusion vulnerability that can be exploited by unauthenticated remote attackers to execute arbitrary code on the server. The issue is categorized with high impact across confidentiality, integrity, and availability (CVSS v3.1/4.0 metr...

CVE-2025-8914

CVE-2025-8914 affects the WellChoose Organization Portal System. The connected documents describe a SQL injection vulnerability resulting from the application’s lack of validation of externally entered SQL statements, allowing unauthenticated remote attackers to inject arbitrary SQL commands to r...

CVE-2025-8909

CVE-2025-8909 affects WellChoose Organization Portal System. Multiple sources describe an Arbitrary File Reading via Absolute Path Traversal, enabling remote attackers with low privileges and no user interaction to download arbitrary system files. Concrete details include affected product name an...

CVE-2025-8910

CVE-2025-8910 affects WellChoose Organization Portal System. The connected sources describe a Reflected Cross-Site Scripting (XSS) vulnerability that enables unauthenticated attackers to execute arbitrary JavaScript in a user’s browser via phishing. The issue is widely reported across NVD, Red Ha...

CVE-2025-8913

CVE-2025-8913 concerns WellChoose’s Organization Portal System, which reportedly contains a Local File Inclusion vulnerability. Public documents describe unauthenticated remote attackers potentially able to execute arbitrary code on the server via LFI, but do not provide explicit affected version...

CVE-2026-3825

CVE-2026-3825 affects IFTOP by WellChoose. Affected is versions prior to IFTOP P4 181, with a Reflected Cross-site Scripting flaw that allows authenticated remote attackers to execute arbitrary JavaScript in a user’s browser via phishing. Impact is consistent with a standard XSS concern described...

CVE-2026-3824

CVE-2026-3824 concerns an Open Redirect vulnerability in IFTOP (WellChoose). The issue allows an authenticated remote attacker to craft a URL that coerces a user into visiting a malicious site. According to the provided metrics, the vulnerability is network-exposed with low attack complexity and ...