CVE-2025-29280 Information

Description

Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code.

Reference

https://github.com/Cray0nLee/CVE/issues/1 https://github.com/Cray0nLee/CVE/issues/1

CNNVD-202507-3629 (Published: 2025-07-29)

Share on: