Wellchoose — Vulnerabilities & Security Advisories 16

Wellchoose operates as an employee benefits platform, primarily serving organizations to manage health insurance and wellness programs. Historically, the application has been susceptible to multiple remote code execution (RCE) vulnerabilities, cross-site scripting (XSS) flaws, and privilege escalation issues, with 16 CVEs documented to date. Notable security characteristics include exposure of sensitive user data through improper access controls and insufficient input validation. While no major public incidents have been widely reported, the consistent pattern of vulnerabilities across different components suggests ongoing challenges in secure development practices, potentially exposing both employee and organizational data to unauthorized access.