Perfreeblog@3.1.2 Security Vulnerabilities and Issues — Perfreeblog@3.1.2 CVE List

Lucene search

PerfreePerfreeblog3.1.2

3 matches found

CVE•added 2023/05/18 7:15 p.m.•43 views

CVE-2023-30333

An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.

9.8CVSS9.5AI score0.00107EPSS

CVE•added 2023/05/01 4:15 p.m.•30 views

CVE-2023-29643

Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function.

5.4CVSS5.5AI score0.00432EPSS

CVE•added 2023/08/28 10:15 p.m.•25 views

CVE-2023-40825

An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list.

7.2CVSS7.2AI score0.00982EPSS