Wellchoose

Wellchoose develops a focused portfolio of web-facing administrative and authentication systems, including portal and single sign-on products, that handle identity and organizational workflows. Vulnerabilities affecting the vendor skew toward serious outcomes and recur through input-handling and file-inclusion weaknesses including cross-site scripting, path traversal, OS command injection, and PHP remote file inclusion—flaws endemic to web application layers where user input reaches system commands and file operations. Defenders should prioritize this vendor's advisories for internet-reachable portal and SSO deployments, as these product categories represent high-value authentication targets; live severity and exploitation figures are shown alongside this summary.