CVE-2025-60731

Description

References

• dengxmenglihua/cve · Broken Link
• perfree.org.cn · Product

perfreeblog의 다른 취약점

• CVE-2025-60319보통 6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint …
• CVE-2025-60735높음 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
• CVE-2025-60730높음 7.6PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
• CVE-2025-60729보통 5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
• CVE-2025-29421높음 7.5PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.