Perfreeblog vulnerabilities

3 known vulnerabilities in Perfreeblog from Perfree. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Perfreeblog: Improper Control of Generation of Code

  CVE-2025-29281Apr 15, 2025Perfree

  In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.

• 9.8 Critical severity

  Perfreeblog: Unrestricted Upload of File with Dangerous Type

  CVE-2023-30333May 18, 2023Perfree

  An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.

• 9.8 Critical severity

  Perfreeblog: Unrestricted Upload of File with Dangerous Type

  CVE-2023-27757Mar 15, 2023Perfree

  An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.