Filtered by vendor Perfree Subscriptions
Filtered by product Perfreeblog Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-40825 1 Perfree 1 Perfreeblog 2024-11-21 7.2 High
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list.
CVE-2023-30333 1 Perfree 1 Perfreeblog 2024-11-21 9.8 Critical
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.
CVE-2023-29643 1 Perfree 1 Perfreeblog 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function.
CVE-2023-27757 1 Perfree 1 Perfreeblog 2024-11-21 9.8 Critical
An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.