CVE-2023-27757

CVE-2023-27757 concerns PerfreeBlog v3.1.1, where an arbitrary file upload flaw in the /admin/user/uploadImg component allows an attacker to execute arbitrary code via a crafted JPG file. The vulnerability is treated as critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), with high impact on...