Perfreeblog@4.0.11 Security Vulnerabilities and Issues — Perfreeblog@4.0.11 CVE List

Lucene search

PerfreePerfreeblog4.0.11

3 matches found

CVE•added 2025/05/26 3:15 a.m.•63 views

CVE-2025-5164

A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key. The attack can be initiated remotely. The complexity of an attack is rathe...

8.1CVSS4.2AI score0.00048EPSS

CVE•added 2025/04/15 2:15 p.m.•42 views

CVE-2025-29280

Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code.

4.8CVSS6.6AI score0.00046EPSS

CVE•added 2025/04/15 3:16 p.m.•42 views

CVE-2025-29281

In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.

8.8CVSS7.7AI score0.00115EPSS