Vulnerabilities

TI-2025-39722 CVE-2025-64281 · GHSA-jxr4-23qg-xch9

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows…

MEDIUM 49

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00473 Published 2025-11-12 No fix listed CWE-288

TI-2025-39721 CVE-2025-64280 · GHSA-6pj5-r376-39cc

MEDIUM 49

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00371 Published 2025-11-12 No fix listed CWE-89

TI-2025-37032 CVE-2025-59491 · GHSA-9m78-j7mf-h3ph

LOW 27

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00213 Published 2025-11-12 No fix listed CWE-79

TI-2025-21356 CVE-2025-29980 · GHSA-8hc3-wwgj-w8f5

HIGH 81

A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00572 Published 2025-03-20 No fix listed CWE-89

TI-2023-21190 CVE-2023-40362 · GHSA-4mhf-c48q-rghx

MEDIUM 53

An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00667 Published 2024-01-12 No fix listed CWE-862