Critical
CVSS 9.8
Overview
Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.
CVE-2025-8913
Organization Portal System developed by WellChoose has a Local File Inclusion vu...
Risk analysis
This vulnerability is rated 🔴 CRITICAL.
- CVSS: 9.8 (CRITICAL)
- Detected tags: lfi, rce (tag impact: VERY HIGH)
Recommended actions:
- Normalize paths, use allowlists; block user-controlled file paths.
- Patch/upgrade immediately (remote code execution).
- Reduce exposure (WAF/segmentation), minimize attack surface.