CVE-2025-60735

Description

References

• dengxmenglihua/cve · Broken Link
• perfree.org.cn · Product

Weitere Schwachstellen in perfreeblog

• CVE-2025-60319MITTEL 6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint …
• CVE-2025-60731HOCH 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
• CVE-2025-60730HOCH 7.6PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
• CVE-2025-60729MITTEL 5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
• CVE-2025-29421HOCH 7.5PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.