CVE-2025-60731

Description

References

• dengxmenglihua/cve · Broken Link
• perfree.org.cn · Product

Mais vulnerabilidades de perfreeblog

• CVE-2025-60319MÉDIO 6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint …
• CVE-2025-60735ALTO 7.6PerfreeBlog v4.0.11 has a File Upload vulnerability in the installPlugin function
• CVE-2025-60730ALTO 7.6PerfreeBlog v4.0.11 has an arbitrary file deletion vulnerability in the unInstallTheme function
• CVE-2025-60729MÉDIO 5.3PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function
• CVE-2025-29421ALTO 7.5PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.