Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
CentralSquare records in CISA KEVNo CentralSquare vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00473 · Published 2025-11-12 · No fix listed CWE-288
Priority MEDIUM 49
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00371 · Published 2025-11-12 · No fix listed CWE-89
Priority LOW 27
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00213 · Published 2025-11-12 · No fix listed CWE-79
