Skip to content
OpenAdvisories
High · 8.8 CVE-2025-29281 EUVD-2025-10961GHSA-f6c5-v8pr-pwg7

In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrar…

Published Apr 15, 2025 · Updated Apr 15, 2025 · Assigned by mitre

Description

In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.

References