← Database

CVE-2025-29280

MEDIUM CVSS: 4.8 Published: 2025-04-15 Modified: 2026-06-17

Description

Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code.

Affected Platforms

Perfree Perfreeblog

Weakness Type

CWE-79

References