Centralsquare vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Centralsquare products: 3 record(s), with severity, exploitation and fixes.

Community Development 3

Exploited only (KEV) →

CVE-2025-59491 Medium · 6.1 CWE-79 Nov 12, 2025

Cross-site Scripting (XSS) in Centralsquare Community Development

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

CVE-2025-64281 Critical · 9.8 CWE-288 Nov 12, 2025

Authentication Bypass Using an Alternate Path or Channel in Centralsquare Community Development

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials.

CVE-2025-64280 Critical · 9.8 CWE-89 Nov 12, 2025

SQL Injection in Centralsquare Community Development

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.