CVE-2025-60730

概要

参考情報

• dengxmenglihua/cve · Exploit
• perfree.org.cn · Product

perfreeblog のその他の脆弱性

• CVE-2025-60319中 6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint …
• CVE-2025-60735高 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
• CVE-2025-60731高 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
• CVE-2025-60729中 5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
• CVE-2025-29421高 7.5PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.