Community Development

3 CVEs product

Monthly

CVE-2025-59491 MEDIUM This Month

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Community Development
NVD
CVSS 3.1
6.1
EPSS
0.1%
CVE-2025-64281 CRITICAL This Week

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Community Development
NVD
CVSS 3.1
9.8
EPSS
0.2%
CVE-2025-64280 CRITICAL This Week

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Community Development
NVD
CVSS 3.1
9.8
EPSS
0.1%
CVE-2025-59491
EPSS 0% CVSS 6.1
MEDIUM This Month

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Community Development
NVD
CVE-2025-64281
EPSS 0% CVSS 9.8
CRITICAL This Week

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Community Development
NVD
CVE-2025-64280
EPSS 0% CVSS 9.8
CRITICAL This Week

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Community Development
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy