PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function
CVE-2025-60731
CVSS base score
7.6 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-434
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected products
perfree perfreeblog
References
- github.com Broken Link
- perfree.org.cn Product