Medium severity4.8NVD Advisory· Published Apr 15, 2025· Updated Jun 17, 2026
CVE-2025-29280
CVE-2025-29280
Description
Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3=4.0.11+ 1 more
- (no CPE)range: =4.0.11
- cpe:2.3:a:perfree:perfreeblog:4.0.11:*:*:*:*:*:*:*
- PerfreeBlog/PerfreeBlogdescription
Patches
Vulnerability mechanics
References
1- github.com/Cray0nLee/CVE/issues/1nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.