Perfree: >> Perfreeblog >> 3.1.2 Security Vulnerabilities
An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list.
CVSS Score
7.2
EPSS Score
0.01
Published
2023-08-28
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-05-18
Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function.
CVSS Score
5.4
EPSS Score
0.004
Published
2023-05-01