CVE-2025-29280: Perfree Perfreeblog

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Stored cross-site scripting vulnerability exists in PerfreeBlog v4.0.11 in the website name field of the backend system settings interface allows an attacker to insert and execute arbitrary malicious code.

Affected products

• Perfree Perfreeblog: version 4.0.11 only

Published 2025-04-15. Last modified 2026-06-17.