Skip to main content

Community Development

3 CVEs product

Monthly

CVE-2025-59491 Nov 12, 17:15 MEDIUM This Month

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Community Development Centralsquare
NVD
CVSS 3.1
6.1
EPSS
0.1%
CVE-2025-64281 Nov 12, 16:15 CRITICAL This Week

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Community Development Centralsquare
NVD
CVSS 3.1
9.8
EPSS
0.2%
CVE-2025-64280 Nov 12, 16:15 CRITICAL This Week

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Community Development Centralsquare
NVD
CVSS 3.1
9.8
EPSS
0.1%
EPSS 0% CVSS 6.1
MEDIUM This Month

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Community Development Centralsquare
NVD
EPSS 0% CVSS 9.8
CRITICAL This Week

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Community Development Centralsquare
NVD
EPSS 0% CVSS 9.8
CRITICAL This Week

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Community Development Centralsquare
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy