high8.8
CVE-2025-29281
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute …
Impact
In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Perfree | Perfreeblog | Version 4.0.11 |