← Database

CVE-2025-29281

HIGH CVSS: 8.8 Published: 2025-04-15 Modified: 2026-06-17

Description

In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.

Affected Platforms

Perfree Perfreeblog

Weakness Type

CWE-94

References