BaseFortify

Publication date: 2025-10-24

Last updated on: 2026-07-05

Assigner: MITRE

Description

PerfreeBlog v4.0.11 has a File Upload vulnerability in the installTheme function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-24

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2025-10-24

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60731

EUVD

EUVD-2025-35862

Affected Vendors & Products

Vendor	Product	Version / Range
perfree	perfreeblog	4.0.11

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

PerfreeBlog version 4.0.11 has a File Upload vulnerability in its installTheme function. This means that the system improperly handles file uploads during the theme installation process, potentially allowing an attacker to upload arbitrary files to the server. [1]

Impact Analysis

This vulnerability can allow an attacker to upload malicious files to the server, which could lead to unauthorized code execution, data compromise, or server takeover. It poses a significant security risk to the affected system and its data. [1]

Hi! I’m here to help you understand CVE-2025-60731. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70