CVE-2025-29281

In PerfreeBlog version 4.0.11, regular users can exploit the arbitrary file upload vulnerability in the attach component to upload arbitrary files and execute code within them.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.70% chance of exploitation in the next 30 days, 51th percentile

Published

2025-04-15

Proof-of-concept exploits (1)

• Cray0nLee/CVE/issues/2

References

• CVE Record
• NVD entry

Related

• CVE-2025-29280
• CVE-2025-2929
• CVE-2025-2927
• CVE-2025-29306
• CVE-2025-2926
• CVE-2025-2934