← All advisories

High severity7.5NVD Advisory· Published Aug 25, 2025· Updated Jun 17, 2026

CVE-2025-29420

CVE-2025-29420

Description

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.

Affected products

3

perfree/PerfreeBlog2 versions
cpe:2.3:a:perfree:perfreeblog:4.0.11:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:perfree:perfreeblog:4.0.11:*:*:*:*:*:*:*
- (no CPE)range: =4.0.11
PerfreeBlog/PerfreeBlogdescription

Patches

Vulnerability mechanics

References

1

github.com/147536951/Qiany1/blob/main/Perfreeblog_1.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.